OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 17.7 Legacy Series »
  • Multiple additional WAN ip ranges
« previous next »
  • Print
Pages: [1]

Author Topic: Multiple additional WAN ip ranges  (Read 3066 times)

col360

  • Newbie
  • *
  • Posts: 17
  • Karma: 1
    • View Profile
Multiple additional WAN ip ranges
« on: August 06, 2017, 03:12:32 pm »
What is the current best / recommended way to add multiple additional WAN IPs. We are given some extra WAN IP in the form of 2 separate /29.

I want to be able to accept incoming traffic to those IP and direct specific ports to some services living on different internal IPs.

So far I've only managed to do 1:1 NAT to one of the internal IP. However this locks this single extra IP to a single internal IP (1:1) so I can't direct different services to different internal IP. This limit the usability of the extra IPs.

On our old firewall (Sophos UTM) we were able to add the additional IP to the WAN interface and then do 1:1 NAT or port port forward for single port or multiple port to one or more internal IP as needed. Also used masquerading to route out going traffic for internal IP to go via specific public IP.

Thanks.
Logged

bartjsmit

  • Hero Member
  • *****
  • Posts: 1538
  • Karma: 166
    • View Profile
Re: Multiple additional WAN ip ranges
« Reply #1 on: August 06, 2017, 03:30:19 pm »
You can add a proxy ARP for the WAN interface under 'Firewall -> Virtual IPs -> Settings -> Add' to avoid 1:1 NAT tying up your WAN addresses.

Bart...
Logged

col360

  • Newbie
  • *
  • Posts: 17
  • Karma: 1
    • View Profile
Re: Multiple additional WAN ip ranges
« Reply #2 on: August 06, 2017, 04:20:34 pm »
I'm not familiar with ProxyARP however will give that a try.

Thanks.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 17.7 Legacy Series »
  • Multiple additional WAN ip ranges
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2