In reply to a post by candlerb:

In reply to a post by Pheasant:

Exactly that! 👍

APTMAN hasn't said how many holiday lets, but a /29 gives six five (oops forgot about the gateway) useable public IP's, presumably plenty if he was hopeful of a 4-port ONT.

You'll get 5 IPs if you put them on a flat LAN, but that's not how you'll do it (unless you want to put a separate router in each apartment)

With a single router, you'd create separate private subnets, e.g.
192.168.0.0/24
192.168.1.0/24
192.168.2.0/24
... etc

each with their own DHCP pool; and then you'll map each of these to a different public IP for NAT. You can use all 8 of your addresses from the /29 this way, because the /29 isn't appearing on a single ethernet segment, it's being treated as 8 x /32.

Ah yes, see what you're saying. If you've already got another say a /30 on the WAN interface (probably just the PPPoE assigned addressed in an FTTP scenario to be fair) then you can static route the 'additional' /29 block over it, and as this new block isn't actually allocated to any interface, the full 8 IP's can be used. The concept/need for for network, broadcast IP etc addresses from the block isn't needed.

I had in my head, that the /29 block is directly on an interface (no other seperate WAN IP already, doh!!), then to be able to route from the block, one IP address must go to the network IP, one IP for the gateway and one IP for the broadcast. In that case its back to 5 useable host IP's.

Yep. You don't even need a WAN /30 for this to work.

On my Cerberus connection, I have a /30 routed to me. One of the addresses I assign to the router WAN and is my "default" outbound NAT. The other three are available as additional 1:1 NAT or static routes.

I can give public address 1.2.3.4 to a specific server (without NAT), by adding 1.2.3.4/32 as a loopback on that server, and then static-routing 1.2.3.4 to its private IP address. This means I don't waste any of the addresses.

I am not opening a new 'Butlins Camp' it's only 3 flats max

Both my WAN connections are 'Business' .

As an Experiment to get 3 usable LANs (as described above posts) while I still have this connection available for a few months, If this works ok then I can get a larger block of IP's when the flats are ready from my FTTP cp.
On my ADSL2 connection I have a Block of 6 IP addresses so when I get time I'm going have a go at re-configuring my 'spare' home built pfSense firewall/router to work so it gives 3 x LANs it has 4 x NIC's.

Edited by APTMAN (Tue 17-Aug-21 09:45:50)

In reply to a post by APTMAN:

I am not opening a new 'Butlins Camp'

There was me thinking you was bringing back Warners Wagtails

Edited by deleted (Tue 17-Aug-21 10:49:27)

In reply to a post by APTMAN:

On my ADSL2 connection I have a Block of 6 IP addresses so when I get time I'm going have a go at re-configuring my 'spare' home built pfSense firewall/router to work so it gives 3 x LANs it has 4 x NIC's.

Perfect, pfSense will work very nicely for this. Select "Manual Outbound NAT rule generation" and add a separate rule for each local network with its own public IP.

Thanks.