title: Multiple public IP Address on same proxmox through pfSense
body: <p>I have a proxmox with several VM/CT and i am currently using pfSense for NAT &amp; VPN.
  Previously, I had only 2 ip address, one for proxmox, on for the only subnet.</p>
  
  <p>Now I want to add another subnet with another ip address, so I got the FO IP Address and i assigned the same MAC Address than the previous one.</p>
  
  <p>I saw that IP Alias is a good Virtual IP solution to match another IP to a different subnet.</p>
  
  <p>I create another interface for my proxmox</p>
  
  <pre><code>auto lo
  iface lo inet loopback
  
  auto vmbr0
  iface vmbr0 inet static
          address  PROXMOX.IP/24
          gateway  PROXMOX.GW
          bridge-ports eno1
          bridge-stp off
          bridge-fd 0
  
  auto vmbr1
  iface vmbr1 inet static
          address  10.0.111.253
          netmask  255.255.255.0
          bridge-ports LAN
          bridge-stp off
          bridge-fd 0
  
  # Only vmbr2 is new, I did not touch the others
  auto vmbr2
  iface vmbr2 inet static
          address  10.0.1.253
          netmask  255.255.255.0
          bridge-ports LANSWP
          bridge-stp off
          bridge-fd 0
  </code></pre>
  
  <p>To the pfSense's VM, I added vmbr2 using VirtIO</p>
  
  <p>To a new Ubuntu CT, I added a network device (virtIO)
  eth0 / vmbr2 / IP 10.0.1.1/24 / GW 10.0.1.254</p>
  
  <p>I added new Virtual IP
  IP Alias on WAN with NEW_PUBLIC_IP/32 address</p>
  
  <p>I added new assignment to new the pfSense interface
  vtnet2 / IPv4: Static IPv4 / IPv4 Address: 10.0.1.254/24</p>
  
  <p>I configured a new DHCP server:
  Services > DHCP Server > LANSWP
      Enable
      Range: 10.0.1.10 -> 10.0.1.245
      DNS Servers: 8.8.8.8, 8.8.4.4</p>
  
  <p>ifconfig show me</p>
  
  <pre><code>eth0: flags=4163&lt;UP,BROADCAST,RUNNING,MULTICAST&gt;  mtu 1500
          inet 10.0.1.1  netmask 255.255.255.0  broadcast 10.0.1.255
  </code></pre>
  
  <p>It seems very similar to another CT for the previous subnet.</p>
  
  <p>I open the port 80 &amp; 443 to the new server.
  Now, webserver is available on the internet, Yeepee !</p>
  
  <p>But the <strong>webserver is unable to reach internet</strong></p>