OPNsense Forum

English Forums => General Discussion => Topic started by: vikozo on August 10, 2017, 02:54:57 pm

Title: Graphic Design wiht IP / VLANs
Post by: vikozo on August 10, 2017, 02:54:57 pm

hello
i get sometimes confused when reading about Firewall and IP Ranges.
is there a Example showing this.
I would have the ISP Router (Fritzbox) -- Firewall -- Switch -- Server (Mail/Web)
so if the Firewall is writing about the WAN it meas the "LAN" Between Firewall and ISP Router, and i belive they would Need theyere one IP Range with just 2 IP?

have a nice day
Vinc

Title: Re: Graphic Design wiht IP / VLANs
Post by: bartjsmit on August 10, 2017, 07:02:05 pm

Hi Vinc,

Yes a subnet with at least two IP addresses is required to connect the 'WAN' side of OPNsense to your ISP router. There may be restrictions on the mask size on the router and for IPv4 you need a network and a broadcast address, which makes your smallest usable subnet /30 with a mask of 255.255.255.252.

Bart...

Title: Re: Graphic Design wiht IP / VLANs
Post by: vikozo on August 18, 2017, 08:05:12 am

Thanks for your feedback.
i think i have to replan the IP Ranges to use.
sorry if i do ask some strange question but at this time i have a working BIND-DNS/Mail/Web server im my net and would like to have it as fast as possible back to the net ;-)