1:1 NAT only working on WAN, not on OPT1 (my second WAN)

toddconley · Sep 12, 2007, 11:45 PM

Hi, I have a simple dual-WAN setup on pfsense 1.2b. I've read every tuturial, and can't seem to figure out what's going wrong.

I have mutliple WAN 1:1 NAT setup, and all the proper Virtual IP's setup (and they're associated correctly with WAN or OPT1 respectively)

LAN = 10.1.0.1
WAN = xxx.xxx.xxx.241 / 28 (block of 16 IP from ISP)
OPT1 - xxx.xxx.xxx.193 / 28 (block of 16 IP from ISP)

I can add LAN rules that point traffic out each gateway, and they both do work, both interfaces are up.

I can add 1:1 NAT rules for any IP on the WAN they all work fine. Whatever machine on my LAN is assigned that external address from the WAN, it works great.

If I try to create a 1:1 NAT rule for any IP on the OPT1 , and create a virtual IP (assigning it to OPT1)… it doesn't work. And yes, I'm setting up the 1:1 NAT rules on the OPT1 if that external IP address is from OPT1

Any Ideas?

cmb · Sep 14, 2007, 2:31 AM

What type of VIP are you using on the OPT WAN?

toddconley · Sep 14, 2007, 6:03 AM

Hi, I'm using Proxy ARP, interface OPT1, single address….

Thanks very much.

hanzam · Sep 20, 2007, 2:50 PM

Greetings ,

Im trying configure my fw using 1:1 NAT , but its not working , can u help me ?

dotdash · Sep 20, 2007, 3:41 PM

Just checking, but you're not trying to setup 1-1 NATs on WAN and OPT are you? 'Cause that won't work. If you need a machine to be available externally from both WANs, use port-forwards.

toddconley · Sep 20, 2007, 4:50 PM

No No… I'm trying to setup DIFFERENT servers inside the LAN with external IP addresses.

For example:

192.168.1.17 inside the lan has an 1:1 NAT for an external IP on WAN
192.168.1.231 inside the lan has a 1:1 NAT for an external IP on OPT1

gilou06 · Oct 19, 2007, 12:24 PM

Hi,
I succeeded into making a similar config up and running.
I had to add Firewall rules on the OPT1 to allow traffic to 192.168.1.231

jy :)