I've add another IP to the LAN interface by creating an alias on the LAN
interface.  Via the shell (either use Diagnostics -> Command or login via
SSH) issue the applicable ifconfig command:

e.g., to create an IP alias of 172.16.1.1 for the LAN where the LAN is on
the interface xy0:
ifconfig xy0 alias 172.16.1.1/24

e.g., to remove an IP alias of 172.16.1.1 from the LAN where the LAN is
on the interface xy0:
ifconfig xy0 remove 172.16.1.1

Such a setting will disappear upon reboot, but if you create a script and
place it in the directory
/usr/local/etc/rc.d
it'll get executed at the end of the startup:

e.g., create a shell script named
/usr/local/etc/rc.d/addLANalias.sh
that contains
---
#!/bin/sh

if test "$1" = "start"
then
   /bin/echo -n 'Adding LAN alias to sk0 ... '
   /sbin/ifconfig sk0 alias 172.16.1.1/24
   echo 'done'
fi
---
then issue the commands:
/bin/chmod 755 /usr/local/etc/rc.d/addLANalias.sh
/usr/sbin/chown root:wheel /usr/local/etc/rc.d/addLANalias.sh

/etc/rc.d/* files get executed by /etc/rc via /etc/rc.start_packages at
bootup.

Hope that helps.


FYI, on Thu, 7 Feb 2008 04:36:40 -0800 I wrote to this list and asked
---
After searching ..., I've not found anything about the best/correct
strategy to use to support multiple LAN subnets on a single LAN port.

The Questions
=============
- is using address aliases the correct/optimal/best way to create the WAN
aliases?

- if using address aliases is *not* the best way, what is?
...
---
It appeared that my "WAN" instead of "LAN" typo in the "Questions"
section was understood.

On Thu, 07 Feb 2008 13:36:28 -0500 Chris Buechler posted the response
---
I have a document that describes in detail the steps required to
accomplish this, though not accessible right now.  You're partially
right, partially wrong.  I'll put it online somewhere later.
---

I never received nor found that document but I've used the alias strategy
ever since and not encountered any issues other than the fact that the
Status -> Interfaces web page will report the interface alias instead of
the one originally configured.

I only mention this because there may be a better way to do this (my
level of expertise in this area is only enough to make me _real_
dangerous).

Specifically, I don't mean to be critical of Chris as I know how easy it
is to miss an email, etc. and the web site (and documentation stuff) was
also in much transition at that point in time.  There's ample evidence of
Chris' excellent responses, including to other questions of mine, and I
very much appreciate an respect his key involvement and the results.  In
fact, there's an all-too-small percentage of commercial software
products, let alone open-source projects, that have the overall quality
that I've seen with pfSense, its support and even it's overall focus and
"business."

______________________________________________________________________
Previous message from Matias Surdi on 2008-06-16 at 12:35 PM +0200
----------------------------------------------------------------------
|Is it possible to add another IP to the LAN interface?
|
|How must it be done?
|
|Thanks.

-- 
-----------------------------------------------
Bryan Derman    Derman Enterprises Incorporated
                http://www.derman.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to