Adding multiple WAN IPs to pfSense (OVH & xcp-ng)

Networking & Firewalls
1

I have pfSense running as a VM on xcp-ng via OVH Cloud. I have added a 2nd IP for the pfSense WAN and this all works.

I now wish to add an additional IP for a VM behind pfSense. I have purchased another IP from OVH and assigned it to my OVH server. In pfSense I have added the IP as a virtual IP following this video however it is not working:

Do I need to allocate a virtual MAC in OVH and create a new VIF in xcp-ng?

2

Is the new IP in the same subnet block of your WAN?

3

I have three IPs from OVH.

  1. xcp-ng
  2. pfSense WAN
  3. server behind pfSense

All three are /32

4

If it’s a /32 then I don’t think you can simply create an alias on the existing WAN interface. I’m not really sure how you do this. If I had to guess you would have to create an interface on xcp and assign it to your VM.

5

I wish to host a number of servers on xcp-ng behind pfSense and I read there is a limit of 7 VIFs per VM.

What I did try was to assign the same virtual MAC to both additional IPs in OVH and this appears to be working however I fear this is a some sort of hack that will bite me later so currently testing.

6

OK…

Upgraded to a block of IPs with a /28 subnet

  1. Allocated to pfSense WAN - Works
  2. Allocated to a VirtualIP in pfSense - Only ping works
7

The welcome email from OVH states all additional IPs use a /32 netmask even if purchased as part of a block?