Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Please bare with my long explanation but this is important to explain the actual problem. Please also pardon my knowledge with PFsense as i am new to

this.

I have single PFSense box with 3 Ethernet adapter. Before moving to configuration for these, i want to let you know i have two Ethernet based

Internet Leased Line Connectivity let's call them ISP A and ISP B. Then last inetrface is LAN which is connected to network switch.

Typical network diagram


ISP A ----->

                            PFSense ----> Switch ---- > Servers

ISP B ----->


ISP A (Initially Purchased)


WAN IP:- 113.193.X.X /29

Gateway IP :- 113.193.X.A

and other 4 usable public IP in same subnet(So the gateway for those IP are also same).

ISP B (Recently Purchased)


WAN IP:- 115.115.X.X /30

Gateway IP :- 115.115.X.B

and other 5 usable public IP in different subnet(So the gateway for those IP is different), for example if 115.119.X.X2 is one of the IP from that

list then the gateway for this IP is 115.119.X.X1.


Configuration for 3 Interfaces


Interface : WAN

Network Port : nfe0

Type : Static

IP Address : 113.193.X.X /29

Gateway : 113.193.X.A

Interface : LAN

Network Port : vr0

Type : Static

IP Address : 192.168.1.1 /24

Gateway : None

Interface : RELWAN

Network Port : rl0

Type : Static

IP Address : 115.115.X.X /30 (I am not sure of the subnet)

Gateway : 115.115.X.B


To use Public IP from ISP A i have done following steps


a) Created Virtual IP using either ARP or IP Alias.

b) Using Firewall: NAT: Port Forward >> i have created specific natting from one public IP to my internal Lan private IP for example :-

WAN TCP/UDP * * 113.193.X.X1 53 (DNS) 192.168.1.5 53 (DNS)

WAN TCP/UDP * * 113.193.X.X1 80 (HTTP) 192.168.1.5 80 (HTTP)

WAN TCP * * 113.193.X.X2 80 (HTTP) 192.168.1.7 80 (HTTP)

etc.,

c) Current state for Firewall: NAT: Outbound is Manual and whatever default rule are defined for the WAN those are only present.

d) If this section in relevant then for Firewall: Rules at WAN tab then following default rule has been generated.

  • RFC 1918 networks * * * * * Block private networks

  • Reserved/not assigned by IANA * * * * * *


To use Public IP from ISP B i have done following steps


a) Created Virtual IP using either ARP or IP Alias.

b) Using Firewall: NAT: Port Forward >> i have created specific natting from one public IP to my internal Lan private IP for example :-

RELWAN TCP/UDP * * 115.119.116.X.X1 80 (HTTP) 192.168.1.11 80 (HTTP)

c) Current state for Firewall: NAT: Outbound is Manual and whatever default rule are defined for the RELWAN those are only present.

d) If this section in relevant then for Firewall: Rules at RELWAN tab then following default rule has been generated.

  • RFC 1918 networks * * * * *

  • Reserved/not assigned by IANA * * * * * *


Last thing before my actual query is to make you aware

that to have multiple Wan setup i have done following steps


a) Under System: Gateways at Groups Tab i have created new group as following

MultipleGateway WANGW, RELWAN Tier 2,Tier 1 Multiple Gateway Test

b) Then Under Firewall: Rules at LAN tab i have created a rule for internal traffic as follows

  • LAN net * * * MultipleGateway none

c) This setup works if unplug first ISP traffic start routing using ISP 2 and vice-versa.


Now my main query and problem is i am not able to use public IP address allocated by ISP B, i have tried many small tweaks but not successful in

anyone. The notable difference between the two ISP is

a) In case of ISP A there Public usable IP address are on same subnet so the gateway used for the WAN ip is same for the other public IP address.

b) In case of ISP B there public usable IP address are on different subnet so the obvious the gateway IP for them is different from WAN gateway's IP.

Please let me know how to use ISP B public usable IP address, in future also i am going to rely for more IPs from ISP B only.

share|improve this question
    
Duplicate post: serverfault.com/questions/400913/… –  Michael Kjörling Jun 21 '12 at 12:25
    
Please don't crosspost. Closing this version –  Michael Mrozek Jun 21 '12 at 14:21
    
See, i am new to stack world, i don't know about cross posting, but thanks for knowledge. But could you please let me know where exactly i can ask this question.. else evry other question i will delete. –  user1471995 Jun 22 '12 at 11:05
    
Is there here no one who can solve this issue. –  user1471995 Jun 28 '12 at 5:11
add comment

closed as too localized by Michael Mrozek Jun 21 '12 at 14:21

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.