Help setting up Static IPs

[moonshadow]

I run OpnSense in a Proxmox host and you access the VLAN through a bridge vmbr1. I run several machines to static IPs from Comcast which use the router's gateway and static IPs.

The router's gateway is 71.26.149.22 and the IPs are 71.26.149.16/29 .17-.21 for Static IPs
My WAN gateway is 10.1.10.1/24
My VLAN gateway is 192.168.15.1/24

My thought was to create a Static route with a gateway on the WAN being 71.26.149.22 but it didn't work. Am I doing something wrong? The hosts connect to the VLAN bridge. Do I need firewall rules? Any help would be appreciated as I am not good with Opnsense.
Thanks

[Vilhonator]

You can't use routers IP on WAN interface (You can assign only 1 IP per client).

Way you are able to use routers public IP on WAN, is to connect the WAN port to LAN port, enable DHCP on router and use DHCP on WAN (also un-tick "Block private IPs" on WAN interface settings.)

What you are able to do, is to sign another public static IP for your WAN interface (that is if there's one which isn't in use.)

To assign public static IP, you need set routers IP as a gateway (otherwise it is same as with assigning IP when directly connected to internet), as long as router has route for that specific network, it will work, otherwise you need to route the traffic to right gateway on the Internet side.

If your office / home has second ethernet port which connects directly to the internet, then you can assign public IP like you assigned the public IP on the router.

[Vilhonator]

Now before you start playing with routes, connect your PC to opnsense and google "what is my IP". If google shows different IP than your router has, then your opnsense has different IP, if it's same, then your opnsense is using routers IP allready.

It is better to call your ISP and confirm if it is routing issue and assistance with setting things right. Getting routes wrong will lock you out from router and opnsense management and disconnect from internet completely and you need to reset everything to last working configuration (that is if you haven't disabled automatic backups)

[moonshadow]

Thanks for the reply. I think I follow what you are saying. I'm not sure it is possible with my networking setup. Possibly if I turned my gateway/router into a bridge and used a hardware firewall I could probably accomplish it but I can't afford that.