WAN IP Addresses from ISP on 2 Fiber Lines

[WCS]

That just sounds like a standard router config: one public IP and a bunch of privately-addressed interfaces.

That sounds right according to my limited knowledge.

Is there a way to set this device into bridge/passthrough/transparent mode and just use the NGFW as your router on that WAN?

By this device, I think you mean the ADTRAN which is only connected to the 1st/original fiber and sits in front of my WAN1 connection in Untangle. It was setup by my ISP and is working fine for that line. The issue is with the 2nd/new fiber which does not have an ADTRAN router, it only has the ETHERJACK and I do not think it has any routing capabilities. That is why I think I am having an issue. My ISP says my ADTRAN can not handle more than 1Gb so it can not handle a 2nd fiber. I am wondering if it would be possible to purchase an additional used ADTRAN and hook it to the 2nd fiber in front of Untangle and program it myself or use some other device, but I have never programmed one and am not sure if that would work. My 2nd fiber is working fine as long as I code the /31 IP and gateway into my Untangle WAN2 but that leaves me unable to use the /29 IP addresses like I do on the 1st WAN. This only gives me one usable WAN IP on WAN2 for Untangle. WAN1 has 5 usable IPs for Untangle. I am paying $35 a month for the /29 addresses on each of the fiber lines but am unable to use them on WAN2.


Thank you for taking the time for your responses.

[gravenscroft]

Hang on, I'm not clear on something.

WAN IP addresses on a /31 network and a block of 8 "LAN" IPs on /29

That just sounds like a standard router config: one public IP and a bunch of privately-addressed interfaces. Is there a way to set this device into bridge/passthrough/transparent mode and just use the NGFW as your router on that WAN?

If not, then I'd probably just set the WAN interface connected to that device to Auto (DHCP) and let the router handle its IP assignment.

[WCS]

Adding the IP aliases is what I do on the 1st/original WAN however on it the WAN IP is in the same gateway and within the same /29 range as the aliases. The 2nd/new WAN has the /31 IP coded as the WAN IP along with it's gateway. The /29 addresses are a different gateway so how would they work as aliases?

Edit: I realize this is probably more of an ISP issue than for Untangle, but I am checking with the forum in case I am missing something Untangle might could do. What I am really hoping is another Untangle user has run into this same issue and might tell me what they did about it short of paying Lumen/Centurylink another $210 a month on a 3 year contract for a router to put in front of the Untangle box..

[gravenscroft]

You'll usually need to add any additional IPs as aliases, configured at the bottom of the interface config menu. NGFW doesn't know it 'owns' those addresses until that point.

I'm curious what 'to get the new line working' means. What's the actual problem with the second WAN?

[WCS]

Untangle is on 16.5.0 (planning to upgrade in a week or so).
Untangle is in Router mode.
Internet is 2 business fiber lines to same Untangle box.
The ISP has provided each of the fiber lines with it's own set of WAN IP addresses on a /31 network and a block of 8 "LAN" IPs on /29 that are to be my WAN addresses coded in Untangle.

The 1st and my original line is working the way I need it to. The Fiber comes into a RAD EXT 203-AM ==> ADTRAN Netvanta 5660 ==> Untangle. I can code or use any of the 5 usable IPs on the /29 network as WAN addresses in Untangle and have no issues.

The 2nd and new fiber however is not working the same way. The new line comes into a RAD EXT 203-AM ==> ETHERJACK ==> Untangle. The only way I have been able to get the new line working is to code it's /31 WAN IP address as the WAN IP in Untangle. This makes it's /29 addresses useless.

Obviously the ADTRAN is a router and is performing the magic I need where as the ETHERJACK is not. The ADTRAN was included with my old line. On the new line my ISP told me they no longer offer the ADTRANs but would be glad to provide a router for another $210mo which I turned down and took the ETHERJACK instead.

Has any one else run into this situation? Is there some magic I can work in UNTANGLE to make the /29 addresses usable or am I stuck with only one usable IP for this line?