Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Unifi pfsense and Unifi Public IP Setup, pfsense with Unifi 5 fixed public IP

views
     
TSfrogege P
post Jul 4 2022, 12:16 PM, updated 4y ago

New Member
*
Probation
5 posts

Joined: Jul 2022
Hello, my goals to have a setup with High Availability Setup for my pfsense. Since I subscribed 5 fixed public IP from TM Unifi, How do I set it up properly to have like my pfsense-1(public_ip_1) pfsense-2(public_ip_2). But I google that two router cannot have PPPOE configuration at the same time. So here I'm very confuse how to setup PPPOE from TM Unifi with pfsense. I test for 1 router PPPOE setup works normally and able to get public IP from TM Unifi Vlan. Thanks.

https://pictr.com/images/2022/07/04/BRGp1r.md.png
TSfrogege P
post Jul 5 2022, 11:52 AM

New Member
*
Probation
5 posts

Joined: Jul 2022
QUOTE(aneip @ Jul 4 2022, 09:18 PM)
To have HA with 2 pfsense then you need 2 line, not multiple IP address.

If you want 2nd public IP at 2nd pfsense. Just bridge 1 interface with pppoe and connect the interface to 2nd pfsense as wan interface. Use the 2nd IP as interface ip and 1st IP as gateway. But 1st pfsense need to be up also.

Or, use TM router as pppoe dialer. 2nd IP at 1st pfsense. 3rd IP at 2nd pfsense.
*
I see, so if I choose the 2nd option that you mention, where NAT happen, is it on PPPOE dialer or my pfsense itself?
TSfrogege P
post Jul 5 2022, 12:08 PM

New Member
*
Probation
5 posts

Joined: Jul 2022
What I'm try to achieve is there architecture. Since I want pfsense handling NAT and OpenVPN server over there

https://pictr.com/images/2022/07/05/BR8RaY.md.png
TSfrogege P
post Jul 14 2022, 11:25 AM

New Member
*
Probation
5 posts

Joined: Jul 2022
QUOTE(niakulah @ Jul 5 2022, 03:43 PM)
But why?

Because from a high availability point of view, your ISP, dumb switch, and managed switch are all single points of failure.

Unless you are just experimenting/labbing.
*
It just for my home lab. If I want to make HA point of view, what architecture its look like.
TSfrogege P
post Jul 14 2022, 02:29 PM

New Member
*
Probation
5 posts

Joined: Jul 2022
QUOTE(niakulah @ Jul 14 2022, 12:00 PM)
1st result on Google for pfsense HA already gives you an example:


Another way to do it would be to replace the 198.51.100.x segment in the example diagram with a private IP segment e.g. 10.10.10.x, then NAT your public IPs to the 2 FWs.
*
I see, but I don't quite understand with PPPoE connection. Since I only have 1 account right. How to configure it onto both pfsense. PPPoE connection is on WAN switch? or need configure on pfsense.

Is that what you mean later will NAT tu public IP from pfsense. confused.gif

 

Change to:
| Lo-Fi Version
0.0186sec    0.58    6 queries    GZIP Disabled
Time is now: 18th December 2025 - 06:09 AM