[email protected] wrote: > This is my setup > > WAN PUBLIC/30 - is obviously connected to my isp. > LAN PRIVATE/24 - is natted users with no special needs. > OPT1 PUBLIC/29 - is handed out one by one to users with special needs. > OPT2 PUBLIC/29 - IS WHAT I NEED HELP FOR! > > Since the user of opt2 want his own router to control/own this scope, how do > I then set up the interface on my pfsense-box? > > Should I create the OPT2 as a interface bridged with WAN? > > Kind regards > Anders Dahl > > > Don't bridge. Just make it just like LAN and then deny packects to/from OPT2 at all interfaces except WAN. Double NAT works for 99% of everything he will probably do. VoIP can get fussy or if he wants to host something publicly from this setup would be two things that would be difficult.
Lyle Giese LCR Computer Services, Inc. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
