Pfsense with multiple WAN ranges on the same interface

Networking & Firewalls
1

Hi,

Our ISP gives us 2 different IP ranges on the same interface, each with its own default gateway.

The original range was something like 200.100.100.128/28 with the default gateway on 200.100.100.142.

Later on, they gave us something like 200.100.100.64/27 with the default gateway on 200.100.100.94.

I configured my WAN interface on 200.100.100.141 and I can easily add Virtual IPs in the range 200.100.100.128/28, and all of them use the gateway on 200.100.100.142.

However, now I need to configure the IP 200.100.100.93, but it should use the gateway on 200.100.100.94. How do I configure this?

Any help would be appreciated.

2

create another interface as WAN2. Search “pfsense two WAN”

the /28 gives you hosts .129 - .142 GW .142

the /27 gives you hosts .65 - .94 GW .94

3

Hi @pavlos, thank you for your answer.

You say I should create a second WAN interface ON THE SAME NIC? Will it allow me to do so without using VLANs? (my ISP doesn’t use VLANs, it just throws both networks on the same LAN and ARP does the rest).

4

I assume you have a pfsense firewall with at least 3 nic’s (usually it is 4 or 6).

WAN1 ---- WAN2 ---- LAN ---- OPT
GW .142   GW .94

You can configure them any way you want.

5

Can be done with only one WAN nic.

Manually add a Gateway under System > Routing > Gateways for your 2nd WAN Virtual IP range - ensuring you’ve got the correct subnet settings all over.

Look into creating Gateway Groups and possibly assign one as Default Gateway IPv4 for outbound traffic - depending on your multi-wan requirements.

And then have a look at these doc pages for caveats regarding inbound traffic.

  • Original WAN Block
    200.100.100.128/28  # CIDR ID, Size 16
200.100.100.129-142 # 14 Usable
200.100.100.143     # Broadcast Address
200.100.100.142     # Gateway Address
  • Second WAN Blcok
    200.100.100.64/27   # CIDR ID, Size 32
200.100.100.65-94   # 30 Usable
200.100.100.95      # Broadcast Address
200.100.100.94      # Gateway Address
1 Like