Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    One server two 1:1 Nats? One for failover…

    NAT
    4
    7
    3.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cybercare
      last edited by

      Am not able to test this due to being in production thus why I will ask.

      Is it possible to have two 1:1 nats set for the same internal server but only use one, unless the isp fails of course than use other?

      Example I have a ip pbx on one ISP with 1:1 nat. My Sip Provider does not register they just forward to an IP but I can give them a failover IP that is on another ISP…

      I have pfsense doing failover and have plenty of IPs from both ISPs...

      I want it so if ISP1 went down the phone box will be online using ISP2 with the alt 1:1 nat public IP...

      Is this doable? I have the gateway in the rules setup correct for failover, but as it stands now it will end up with whatever public IP is on the 2nd ISP if the other ISP fails and not the specific one I need.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        No.
        1:1 NAT also definies how outgoing taffic should be NATed.

        But… why do you use 1:1 NAT?
        Cant you just forward the ports with normal NAT?

        (with normal NAT it would work)
        As for the reregistering of the voip box.
        Search the forum.
        there are quite a few thread about this problem around.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • S
          sullrich
          last edited by

          use CARP.

          1 Reply Last reply Reply Quote 0
          • C
            cybercare
            last edited by

            But if I do just port forward yes the box will get anything sent to that IP but when it goes to send out its going to send out from the gateways pub IP and not the correct one…

            I want it to 1:1 outgoing and incomming but only one needs to work at a time, so if one ISP went dead than the other would be used...

            Right now I have two ISPs and have one with the 1:1 nat but if I drop that one the box switches to the other ISP and uses the gateways pub IP... In a nutshell I want it like this but instead of using the gateways default pub IP on that ISP I want it to use another IP from that same ISP...

            1 Reply Last reply Reply Quote 0
            • H
              hoba
              last edited by

              You want CARP, portforward and advanced outbound nat in combination with failover pools  ;)

              1 Reply Last reply Reply Quote 0
              • C
                cybercare
                last edited by

                I cant have no more boxes though. :( I already pushing the limit on number of boxes so no way to do the carp…

                1 Reply Last reply Reply Quote 0
                • H
                  hoba
                  last edited by

                  You don't need additional boxes.

                  Hint: What is a carpcluster consisting of 2 machines with 1 dead machine? Yep, still working  ;D

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.