Re: [pfSense] Design Best Practice Question

2015-03-08 Thread Justin The Cynical
On 08/03/2015 05:32, Tim Hogan wrote: > Yes, this is a Comcast Business account. After this discussion I have > decided to switch to a 1:1 NAT layout. > > Since you have mentioned that you also have a Comcast Business account I > was wondering if you also have IPv6 working through pfSense with th

Re: [pfSense] VIPs : CARP vs IP Alias

2015-03-08 Thread Espen Johansen
I beleive the key to this is proxy arp. Brgds, Espen 8. mars 2015 23:50 skrev "Bryan D." : > While we're on the topic, I have a functioning v2.2 setup that uses a /29 > set of static IPs: > - 1 IP is the gateway address and 5 IPs are "usable" (quite common, I > believe) > - one of the "usable" IP

[pfSense] VIPs : CARP vs IP Alias

2015-03-08 Thread Bryan D .
While we're on the topic, I have a functioning v2.2 setup that uses a /29 set of static IPs: - 1 IP is the gateway address and 5 IPs are "usable" (quite common, I believe) - one of the "usable" IPs is assigned to the WAN interface - the other 4 "usable" IPs are assigned to VIPs - the WAN IP and VI

Re: [pfSense] [Bulk] IP Alias -vs- Proxy ARP for NAT

2015-03-08 Thread Tim Hogan
I have seen that page and I don't know about "saying it all". I still cannot figure out what the advantages and disadvantages are. All I want is to be able to do a 1:1 NAT with some public IP addresses. These addresses do not need to be used by the firewall directly. So in this case it would

Re: [pfSense] [Bulk] IP Alias -vs- Proxy ARP for NAT

2015-03-08 Thread PiBa
Says it all: https://doc.pfsense.org/index.php/What_are_Virtual_IP_Addresses Which is better, that depends on what you need it to do. Tim Hogan schreef op 8-3-2015 om 13:48: I am setting up my firewall to do 1:1 NAT with a block of public IP addresses. I have found several posts about setting u

[pfSense] IP Alias -vs- Proxy ARP for NAT

2015-03-08 Thread Tim Hogan
I am setting up my firewall to do 1:1 NAT with a block of public IP addresses. I have found several posts about setting up 1:1 NAT and some of them say to use Proxy ARP when creating the Virtual IP and others say to use IP Alias. Can someone full explain the difference between the two and off

Re: [pfSense] Design Best Practice Question

2015-03-08 Thread Tim Hogan
Yes, this is a Comcast Business account. After this discussion I have decided to switch to a 1:1 NAT layout. Since you have mentioned that you also have a Comcast Business account I was wondering if you also have IPv6 working through pfSense with the way Comcast attaches everything to the mod