Additional IP Hetzner

[jobbedf]

Hello

This is currently my network configuration. I am using my public ip .116 for my PVE e, another public ip .118 as a NAT network for my VMs. The public ip .118 is connected to the firewall as WAN and the firewall then controls all the traffic. Now on the firewall I would like to also add the public ip address .100 as an extra WAN interface but that doesn't work because those ip's overlap because of have subnet (the subnetmasks are /26).

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto enp41s0
iface enp41s0 inet manual

auto vmbr0
iface vmbr0 inet static
        address x.x.x.116/26
        gateway x.x.x.65
        bridge-ports enp41s0
        bridge-stp off
        bridge-fd 0

        up route add -net x.x.x.64 netmask 255.255.255.192 gw x.x.x.65 dev vmbr0

auto vmbr1
iface vmbr1 inet static
        address 172.16.x.2/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0

Now I would still like to have the .118 and .100 both as WAN interface in my firewall. With what adjustments in the network configuration does this work? Should I create a separate bridge with /32 for both ip's or not? I am new to Proxmox so it is still a bit of a search.

Thanks in advance.

 

[gurubert]

The public ip .118 is connected to the firewall as WAN and the firewall then controls all the traffic. Now on the firewall I would like to also add the public ip address .100 as an extra WAN interface

Your firewall as a VM? What kind of firewall are you using?
It should be possible to just add the new IP to the existing interface.

 

[jobbedf]

Your firewall as a VM? What kind of firewall are you using?
It should be possible to just add the new IP to the existing interface.

Yes, I'm using PFsense but when I try to add an extra interface, it tells me that the IP is overlapping with the existing IP.

 

[gurubert]

Do not add a new interface, add the new IP to the existing interface of the pfSense VM.

 

[jobbedf]

I didn't found an option to add an additional ip to the WAN interface but I found the option to add an Virtual IP. I did that and tried that ip with a forward rule but the test failed.

 

[gurubert]

When I read https://docs.netgate.com/pfsense/en/latest/firewall/virtual-ip-addresses.html correctly, you need an IP alias.

 

[jobbedf]

Yes, I configured that. But when I configured an NAT forward rule with that IP Alias, it doesn't work.

 

[jobbedf]

What MAC Address should I set in the Proxmox Pfsense VM for this setup for this to work?