Proxy ARP VIP's wont respond to pings.
Only CARP type VIPs.
But CARP VIPs have to be in the same subnet of the regular IP on the interface..

I think what you are trying to do isnt possible with VIP's.
You could search the forum on how to hack yourself alias IP's together.
*This is not supported.*

I think the "Advances Hackery" part of the openVPN docu
http://doc.pfsense.org/index.php/VPN_Capability_OpenVPN
might help you hack yourself an alias together since it describes how you add shellcommands to your config.
Just using adding an alias manually from the shell wouldnt survive a reboot.

Matias Surdi schrieb:
Thanks for your quick response.

It's needed mainly for backward compatibility with the network scheme we have currently. We have two default gateways, and we are trying to unify them on a single host, but without having to modify inmmediatly all our servers and desktops. Also, because of the hardware we are using, we can't set up this with two different network interfaces, so, an alias is needed.

Anyway, I've tryied with Virtual IPs, but it doesn't seem to work as a "normal" alias... For example, if I do a Ping from a host on the LAN side to the pfSense box, I can see on the pfSense box the incomming ICMP requests, but no replies are sent out... so, at the arp level things seem correct, but I don't understand why the box is not replying to ICMP requests....

Thanks for your help.


Matthias May escribió:
Create VIP's
Firewall --> Virtual IPs
But what do you need multiple LAN IP's for?

Matthias May


Matias Surdi schrieb:
Is it possible to add another IP to the LAN interface?

How must it be done?

Thanks.







Reply via email to