Show Posts
1
General Discussion / Dual WAN ip config help
« on: February 24, 2022, 10:55:39 am »
As the title states, im currently trying to configure a second public ip from a virtual ip to have it be accessible for a number of servers.
Version: opnsense 21.1.9_1
environment: virtualized on ESXI
**given ips are for example purposes**
These ips are from a 1.1.1.24/30 range
Current wan: 1.1.1.25/32
Second Wan VIP to add: 1.1.1.26/32 type: IP alias
LAN: 192.168.1.0/24
Server ip: 192.168.1.2
Nat port: 4444 to internal :5555
For testing purposes I was able to confirm a ping works externally towards 1.1.1.25 from an allow rule in the firewall. However when trying to ping 1.1.1.26 it fails with the same rule allowing it. I've also tried doing a 1:1 nat from 1.1.1.26 -> 192.168.1.2 and then running a ping and still without success. internally, 1.1.1.26 can be pinged from just the VIP which works as intended from the documentation, but externally it wont answer.
the end goal with this configuration is to nat a secondary server on that specific VIP
I'm at a loss, have been reading through forums for countless hours but have still been unable to get it working.
Version: opnsense 21.1.9_1
environment: virtualized on ESXI
**given ips are for example purposes**
These ips are from a 1.1.1.24/30 range
Current wan: 1.1.1.25/32
Second Wan VIP to add: 1.1.1.26/32 type: IP alias
LAN: 192.168.1.0/24
Server ip: 192.168.1.2
Nat port: 4444 to internal :5555
For testing purposes I was able to confirm a ping works externally towards 1.1.1.25 from an allow rule in the firewall. However when trying to ping 1.1.1.26 it fails with the same rule allowing it. I've also tried doing a 1:1 nat from 1.1.1.26 -> 192.168.1.2 and then running a ping and still without success. internally, 1.1.1.26 can be pinged from just the VIP which works as intended from the documentation, but externally it wont answer.
the end goal with this configuration is to nat a secondary server on that specific VIP
I'm at a loss, have been reading through forums for countless hours but have still been unable to get it working.