PfSense firewall and multiple https servers

pfsense

I'm using pfSense as our office firewall and am attempting to setup a second HTTPS server that needs to be visible to the outside. Because they are HTTPS servers, they need separate IP addresses. How do I configure pfSense to accept the other static IP addresses I've gotten from our ISP?

Assigned IPs: x.x.x.24-27
Gateway is x.x.x.28
pfSense version: 2.2.6

I've tried adding more NIC ports to the firewall, but pfSense doesn't like multiple interfaces using the same gateway.

pfSense documentation implies that an interface can't have multiple IP addresses and that wouldn't in this case anyhow, since the port 443 traffic needs to be separated out and redirected to different servers.

Virtual IPs sound promising, but I haven't managed to get one to ping yet.

Any suggestions on where I should be looking?

Best Answer

You don't want additional NICs. Just add virtual IPs on WAN for each additional IP. If it's cable service, you often have to power cycle the cable modem after doing so before the IPs will work.

"pfSense documentation implies that an interface can't have multiple IP addresses"

What'd you see that seemed to imply that? There certainly isn't anything intending to imply that.

Related Solutions

Firewall – pfSense router on a LAN with two gateways

If you setup your whole setup something like this:

New WAN |  
         --> pfSense --> LAN
ADSL    |

so the pfSense gets 2 internet connections.

The above setup should work without too many problems, as the servers will now only have one gateway to use.

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp

Did you checked the Event Viewer on the W2008R2 ?

Could be due to max TCP connections allowed by Windows: https://technet.microsoft.com/en-us/library/cc759700%28WS.10%29.aspx

pfSense as a software router uses lots of connections which can be opened but not closed, waiting status and so on. This kind of network use can achieve the default limits of TCP stack and windows could close or not allow more connections of this type. The first thing to do on this case it's to check Event Viewer to see if something it's reported there.

Best Answer

Related Solutions

Firewall – pfSense router on a LAN with two gateways

Virtualized pfSense 2.0.1 affecting Hyper-V host connectivity? arp

Related Topic