pfSense Virtual IP Addresses: Part One

pfSense Virtual IP Addresses

Virtual IP address configuration page in pfSense.

A virtual IP address (VIP or VIPA) is an IP address that is not assigned to a specific single server or network interface card (NIC). Rather, it is assigned to multiple applications on a single server, multiple domain names, or multiple servers. Normally, a server IP address depends on the MAC address of the attached NIC, and only one logical IP may be assigned per card. However, VIP addressing enables hosting for several different applications and virtual appliances on a server with only one logical IP address. VIPs have several variations and implementations, including Common Address Redundancy Protocol (CARP) and Proxy Address Resolution Protocol (Proxy ARP).

pfSense Virtual IP Addresses: Proxy ARP

pfSense allows four types of virtual IP addresses: Proxy ARP, CARP, Other, and IP Alias. In this article, I will cover how to configure pfSense virtual IP addresses using Proxy ARP and CARP.


The different types of virtual IP addresses have slightly varied properties. With proxy ARP, the properties are:

  • Can only be forwarded by the firewall (cannot be used by the firewall)
  • Uses Layer 2 (the data link layer) traffic
  • Can be in a different subnet than the interface
  • Cannot respond to pings
pfSense Virtual IP Addresses

Once the Virtual IP has been entered and saved, it is added to the list.

To configure a Proxy ARP virtual IP address, browse to Firewall -> Virtual IPs and Click the “plus” button to add a new virtual IP address. At type, there are four radio buttons; select the radio button for “Proxy ARP” (it should be the default selection). For “Interface”, select “WAN”. At “IP Address(es)“, select “Single address” for “Type” (this should be the default). At “Address“, specify an IP address. At “Description“, enter a description if desired. Then press “Save” to save the changes and “Apply changes” to apply changes if necessary.

Now, the newly-created VIP should be listed at the “Virtual IPs” tab at Firewall -> Virtual IPs.

pfSense Virtual IP Addresses: CARP

You can also configure a virtual IP with CARP in pfSense 2.0. The properties for a CARP VIP include:

  • Can be used or forwarded by the firewall
  • Uses Layer 2 (data link layer) traffic
  • Should be used in firewall fail-over or load-balancing scenarios
  • Must be in the same subnet as the interface
  • Will respond to pings if configured properly

To set up a CARP virtual IP address, browse to Firewall -> Virtual IPs and click the “plus” button to add a new virtual IP address. At “Type“, select the “CARP” radio button, and at “Interface“, select “WAN” (it should be the default). At “IP address(es)“, specify an IP address. At “Virtual IP Password“, specify a password. At “VHID Group“, choose a group. At “Advertising Frequency“, select a frequency (0 for master). At “Description“, add a description if desired. Then press “Save” to save the changes and “Apply changes” to apply the changes if necessary.

In part two of this series, I will cover setting up virtual IP addresses with IP Alias and Other types.

Once again, the “Virtual IPs” tab under Firewall -> Virtual IPs should display the newly-created VIP within the list of pfSense virtual IP addresses. In part two, I will cover IP aliases (new to pfSense 2.0) and other VIPs.


External Links:

What are Virtual IP Addresses? at doc.pfsense.org

Be Sociable, Share!

Comments

  1. The second issue that I’ve with anti-aging goods that
    are is as advertised, the fact that they hardly ever work.

  2. What i don’t understood is in truth how you’re now not really a lot more neatly-liked than you may
    be right now. You’re very intelligent. You know thus significantly in the case of this topic, produced me in my opinion consider it from so many varied angles.
    Its like women and men aren’t interested until it is something to accomplish with Girl gaga!
    Your own stuffs nice. All the time maintain it up!

  3. A biopsy of the streaked part the origin,
    of the claw, along with the surrounding area of skin must be done
    to make sure there’s no dangerous cancer.

  4. If you desire to get a great deal from this article then you have
    to apply these strategies to your won website.

  5. I was very happy to find this web site. I wanted to thank you for ones time just for this fantastic read!!

    I definitely appreciated every little bit of
    it and I have you bookmarked to check out new stuff on your blog.

  6. I am truly thankful to the owner of this web page who has shared this impressive paragraph at at this time.

  7. I read this article fully regarding the resemblance
    of most recent and earlier technologies, it’s remarkable
    article.

  8. Greetings I am so delighted I found your blog page, I
    really found you by mistake, while I was looking on Askjeeve for something else,
    Regardless I am here now and would just like to say cheers for a fantastic
    post and a all round interesting blog (I also
    love the theme/design), I don’t have time to read through it all at the moment but
    I have bookmarked it and also added in your
    RSS feeds, so when I have time I will be back
    to read more, Please do keep up the fantastic
    job.

  9. Gartner also predicts that by the end of this year, most companies and vendors will get their mobile analytics apps developed for specific tasks and
    domains. pdf, or a graphics file so you can then send it to your clients as an email attachment.
    The major documentation required is a licensing
    agreement with the mall management, renewable periodically, usually quarterly or annually.

  10. Magnificent web site. Plenty of helpful info here.
    I’m sending it to a few pals ans additionally sharing in delicious.

    And obviously, thanks to your effort!

  11. There are web sites and printed journals providing thee reviews on the best super bikes in India and also the best 150cc bike in India,
    which people can easily and conveniently avail thus go forward using the ownership of 1 of these.
    Jean Scheid, a Ford dealer, explains the facts and offers some
    advice on car ffinance iff your ratio isn’t where it ought to be.
    For people wwho find themselves very slective concerning the kind of
    automobile they will really want car shopping is a vital endeavor.

  12. If you wish for to increase your knowledge only keep visiting this site and
    be updated with the hottest information posted here.

  13. It is not my first time to pay a quick visit this web page, i am browsing this site dailly and get pleasant facts
    from here every day.

  14. You’re so cool! I don’t think I’ve read through something like that
    before. So nice to discover someone with a few unique thoughts on this issue.
    Really.. thank you for starting this up. This website is something that is required on the
    internet, someone with a little originality!

  15. Hello to every one, it’s actually a pleasant for me to pay a quick visit this website, it
    contains precious Information.

  16. Hi there, the whole thing is going perfectly here and ofcourse every one is sharing
    data, that’s actually excellent, keep up writing.

  17. Students can know about the competitive exam schedule and then view results
    in the newspapers, one can know about the television program schedule in them.
    Hindi is a language which is spoken by a majority of
    the Indian populace and wherever they are it is their favorite Hindi Newspaper
    they turn to whenever they look for news. If a person is residing
    in India he will surely expect that the news should be in Hindi as it is the mother tongue.

  18. Wow, that’s wht Iwas looking for, what a information! present
    here att this webpage, thanks admin of this web page.

  19. Online or offline, it is crucial that you develop a relationship and trust together with your prospects before they
    may obtain you. Choose from the Basic Shop (free) along
    with a Premium Shop ($4. However, creating free pages and adding friends who may well become is a wonderful solution to advertise on Facebook for literally free
    of charge whatsoever.

  20. Good article. I’m dealing with a few of these issues as well..

  21. System requirements: All kinds of home windows operating
    system 32/64 supportable 1 GB RAM 20 GB laborious disk Limitation: A single viewer
    have to be installed and download one copy of this software.

  22. All things thought of, Ad-Aware Free Antivirus+ is a dependable
    choice if you require more than an antivirus product.

Trackbacks

  1. […] the previous article, I covered setting up pfSense virtual IP addresses with Proxy ARP and CARP. In this article, I will cover pfSense virtual IP addreses with IP Alias and Other […]

  2. […] Because ARP does not provide methods for authenticating ARP replies on a network, ARP replies can come from systems other than the one with the required Layer 2 address. An ARP proxy is a system which answers the ARP request on behalf of another system for which it will forward traffic, normally part of the network’s design. Proxy ARP configuration in pfSense has already been detailed in a previous article. […]

Speak Your Mind

*

© 2013 David Zientara. All rights reserved. Privacy Policy