[pfSense Support] pfsense and static IPs through PPPoE

2005-09-09 Thread Darin
I have DSL with 5 static IPs through SBC. I've also been a FreeBSD user 
for a few years now, and currently have a firewall up and running on 4.11
The 5 statics are actually a /29 block, and the IP info is passed down 
through the PPP session.  In order to use the statics on other machines, 
I have to use the nat functions in the PPP daemon and assign a public IP 
to a private IP.  Here is an example from my ppp.conf on how this is done:


nat enable yes
nat same_ports yes
nat addr 192.168.1.5 1.2.3.4
nat addr 192.168.1.6 1.2.3.5

This is the only way I was able to assign those public IPs to another 
box.  I could not get it to work using natd.
Will pfsense be able to do this?  I installed 82.4 on a test machine 
just to get a feel for the interface and didnt really see any provision 
for it.

Any idea how something like this would work?

Thanks for your time.

Darin -

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] pfsense and static IPs through PPPoE

2005-09-09 Thread Bill Marquette
Yup, I have SBC's static offering. With the Cayman router that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side with pfSense.
You then have the option of bridging those IPs to inside (or DMZ) and
putting real addresses on your machines, or doing a 1 to 1 NAT.
The other option is to terminate PPPOE on the pfSense box - you still
get the option to do 1 to 1 NAT, but you lose the bridging option (I
think, I haven't tried that setup, can't see how it would work though).

I've done both setups, started with terminating PPPOE on the pfSense
box, moved to terminating on the router so I could work on CARP and am
back to terminating on pfSense because my Cayman died.

--BillOn 9/9/05, Darin [EMAIL PROTECTED] wrote:
I have DSL with 5 static IPs through SBC. I've also been a FreeBSD userfor a few years now, and currently have a firewall up and running on 4.11The 5 statics are actually a /29 block, and the IP info is passed down
through the PPP session.In order to use the statics on other machines,I have to use the nat functions in the PPP daemon and assign a public IPto a private IP.Here is an example from my ppp.conf on how this is done:
 nat enable yes nat same_ports yes nat addr 192.168.1.5 1.2.3.4 nat addr 192.168.1.6 
1.2.3.5This is the only way I was able to assign those public IPs to anotherbox.I could not get it to work using natd.Will pfsense be able to do this?I installed 82.4 on a test machinejust to get a feel for the interface and didnt really see any provision
for it.Any idea how something like this would work?Thanks for your time.Darin --To unsubscribe, e-mail: 
[EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]


Re: [pfSense Support] pfsense and static IPs through PPPoE

2005-09-09 Thread Bill Marquette
Right now I'm running on a borrows 5100a which bridges the PPPOE
only. Works fine. I don't know anything about the 5360, is
it terminating the PPPOE, or is bridging the PPPOE?

--BillOn 9/9/05, Darin [EMAIL PROTECTED] wrote:



  


What if you dont have the Cayman router anymore? I'm just using a
standard Speedstream 5360 modem that has no routing or firewall
capabilities.

Bill Marquette wrote:
Yup, I have SBC's static offering. With the Cayman router
that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side with pfSense.
You then have the option of bridging those IPs to inside (or DMZ) and
putting real addresses on your machines, or doing a 1 to 1 NAT.
The other option is to terminate PPPOE on the pfSense box - you still
get the option to do 1 to 1 NAT, but you lose the bridging option (I
think, I haven't tried that setup, can't see how it would work though).
  
I've done both setups, started with terminating PPPOE on the pfSense
box, moved to terminating on the router so I could work on CARP and am
back to terminating on pfSense because my Cayman died.
  
--Bill
  
  On 9/9/05, Darin
[EMAIL PROTECTED]
wrote:
  I
have DSL with 5 static IPs through SBC. I've also been a FreeBSD user
for a few years now, and currently have a firewall up and running on
4.11
The 5 statics are actually a /29 block, and the IP info is passed down

through the PPP session.In order to use the statics on other machines,
I have to use the nat functions in the PPP daemon and assign a public IP
to a private IP.Here is an example from my ppp.conf on how this is
done:


nat enable yes
nat same_ports yes
nat addr 192.168.1.5 
1.2.3.4
nat addr 192.168.1.6 

1.2.3.5

This is the only way I was able to assign those public IPs to another
box.I could not get it to work using natd.
Will pfsense be able to do this?I installed 82.4 on a test machine
just to get a feel for the interface and didnt really see any provision

for it.
Any idea how something like this would work?

Thanks for your time.

Darin -

-
To unsubscribe, e-mail: 
[EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  
  
  
!DSPAM:4322115d830751396210774!







Re: [pfSense Support] pfsense and static IPs through PPPoE

2005-09-09 Thread Darin




Its just a bridge. Its a pretty old modem with very basic functions.
About 3-4 years old.
http://www.chipweb.de/dsl/index.php?menu=2id2=33

Darin -


Bill Marquette wrote:
Right now I'm running on a borrows 5100a which bridges the
PPPOE
only. Works fine. I don't know anything about the 5360, is
it terminating the PPPOE, or is bridging the PPPOE?
  
--Bill
  
  On 9/9/05, Darin
[EMAIL PROTECTED]
wrote:
  
What if you dont have the Cayman router anymore? I'm just using a
standard Speedstream 5360 modem that has no routing or firewall
capabilities.

Bill Marquette wrote:

  Yup, I have SBC's
static offering. With the Cayman router
that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side with pfSense.
You then have the option of bridging those IPs to inside (or DMZ) and
putting real addresses on your machines, or doing a 1 to 1 NAT.
The other option is to terminate PPPOE on the pfSense box - you still
get the option to do 1 to 1 NAT, but you lose the bridging option (I
think, I haven't tried that setup, can't see how it would work though).
  
I've done both setups, started with terminating PPPOE on the pfSense
box, moved to terminating on the router so I could work on CARP and am
back to terminating on pfSense because my Cayman died.
  
--Bill
  
  
  
  On 9/9/05, Darin
[EMAIL PROTECTED]
wrote:
  I
have DSL with 5 static IPs through SBC. I've also been a FreeBSD user
for a few years now, and currently have a firewall up and running on
4.11
The 5 statics are actually a /29 block, and the IP info is passed down 
through the PPP session.In order to use the statics on other machines,
I have to use the nat functions in the PPP daemon and assign a public IP
to a private IP.Here is an example from my ppp.conf on how this is
done: 

nat enable yes
nat same_ports yes
nat addr 192.168.1.5

1.2.3.4
nat addr 192.168.1.6

1.2.3.5

This is the only way I was able to assign those public IPs to another
box.I could not get it to work using natd.
Will pfsense be able to do this?I installed 82.4 on a test machine
just to get a feel for the interface and didnt really see any provision

for it.
Any idea how something like this would work?

Thanks for your time.

Darin -

-
To unsubscribe, e-mail: 
[EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  
  
  
  

  
  
  
!DSPAM:432226be835511404224424!





Re: [pfSense Support] pfsense and static IPs through PPPoE

2005-09-09 Thread Bill Marquette
Give 'er a shot. Should work like a charm. Just put your
[EMAIL PROTECTED] username in the WAN config for PPPOE and
watch it fly. You'll need to do some playing with Virtual IPs
so you can handle the 1 to 1 NATs, but shouldn't take too long of
poking through the interface to figure it out.

--BillOn 9/9/05, Darin [EMAIL PROTECTED] wrote:



  
  


Its just a bridge. Its a pretty old modem with very basic functions.
About 3-4 years old.
http://www.chipweb.de/dsl/index.php?menu=2id2=33

Darin -


Bill Marquette wrote:
Right now I'm running on a borrows 5100a which bridges the
PPPOE
only. Works fine. I don't know anything about the 5360, is
it terminating the PPPOE, or is bridging the PPPOE?
  
--Bill
  
  On 9/9/05, Darin
[EMAIL PROTECTED]
wrote:
  
What if you dont have the Cayman router anymore? I'm just using a
standard Speedstream 5360 modem that has no routing or firewall
capabilities.

Bill Marquette wrote:

  Yup, I have SBC's
static offering. With the Cayman router
that
comes with that offering you can terminate PPPOE on the modem and allow
for the 5 addresses to be used on the ethernet side with pfSense.
You then have the option of bridging those IPs to inside (or DMZ) and
putting real addresses on your machines, or doing a 1 to 1 NAT.
The other option is to terminate PPPOE on the pfSense box - you still
get the option to do 1 to 1 NAT, but you lose the bridging option (I
think, I haven't tried that setup, can't see how it would work though).
  
I've done both setups, started with terminating PPPOE on the pfSense
box, moved to terminating on the router so I could work on CARP and am
back to terminating on pfSense because my Cayman died.
  
--Bill
  
  
  
  On 9/9/05, Darin
[EMAIL PROTECTED]
wrote:
  I
have DSL with 5 static IPs through SBC. I've also been a FreeBSD user
for a few years now, and currently have a firewall up and running on
4.11
The 5 statics are actually a /29 block, and the IP info is passed down 
through the PPP session.In order to use the statics on other machines,
I have to use the nat functions in the PPP daemon and assign a public IP
to a private IP.Here is an example from my ppp.conf on how this is
done: 

nat enable yes
nat same_ports yes
nat addr 192.168.1.5

1.2.3.4
nat addr 192.168.1.6

1.2.3.5

This is the only way I was able to assign those public IPs to another
box.I could not get it to work using natd.
Will pfsense be able to do this?I installed 82.4 on a test machine
just to get a feel for the interface and didnt really see any provision

for it.
Any idea how something like this would work?

Thanks for your time.

Darin -

-
To unsubscribe, e-mail: 
[EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

  
  
  
  

  
  
  
!DSPAM:432226be835511404224424!