WAN IP and Gateway IP not in same network error...

Question

I have an ESXi server in a datacenter. They give failover IP's based on MAC address. The Failover IP and the gateway IP or not on the same network. When I fill the IP's and subnet on the WAN interface, I get the following error: "Interface IP and gateway IP address must be in the same network" In UTM 9 this wasn't an issue. Here the URL how to enable a failover IP: forum.online.net/index.php 
 www.astaro.org/.../50686-specific-ip-route-settings.html 
 How do I accomplish this?

MarkusWölfer · Answer

Has anyone found a solution? Is it maybe possible by shell?

Jonathan Gearinger · Answer

Heya Folks, 
 I have run a decent amount of router/firewall VMs running on KVM/Proxmox in OVH and SoYouStart environments. Most you need to follow these basic steps: 
 
 Create the WAN interface with the appropriate MAC address set to the Failover IP (I normally just use Proxmox's NIC MAC field) 
 For Sophos I used a /24 255.255.255.0 and set the gateway (only because you have to) set it to the fail.over.IP.254 - this will not route your traffic. 
 Then go into the GUI and add a static route in this order: 
 You primary hosts default gateway is referred to by OVH as the gateway_vm - http://help.ovh.com/BridgeClient - this is in a different subnet then your failover IP 
 Establish the interface by adding a static route for gateway.VM.IP.254 /255.255.255.0 - PORT 2 (important) (or whatever your WAN interface is) 
 Then a default route 0.0.0.0/0 to gateway.VM.IP.254 and do NOT assign it to any port, the rule above does this and avoids the subnet check. 
 This is working for me for about an hour and matches how RouterOS works. Hope this helps the next round of folks if some have given up already. 
 Good luck. 
 J

Nicolas Gombert · Answer

Hi Mark, 
 
 I've just followed the steps provided by Jonathan. Thanks to him ! 
 
 So for your server : 
 In setup > Network > Interfaces : 
 setup the WAN interface (PORTB by defaut) with : 
 ip : 66.70.125.159/24 
 gw : 66.70.125.254 (don't think just apply that, i know it does'nt feel right) 
 
 In setup > routing >static routing : 
 you'll add 2 routes: 
 - 129.56.27.0/24 - leave GW empty - select WAN interface (PORTB) 
 - 0.0.0.0/0 - GW 129.56.27.254 - leave interface empty 
 
 and that's it. 
 Since I'm deploying my UTM on an OVH dedicated server, I had to setup the right MAC address to my WAN interface but that's specific to OVH's routing with Failover IPs. 
 
 hope it's clear. 
 have a great day