How PFsense NAT's a packet from a WAN interface to a LAN interface
-
I have a several Cisco WAP's on the outside of the firewall on a private network at a remote location. My Cisco wireless controller (4800) resides on the inside of my firewall. The WAP's are connected and talking to the wireless controller, however no one can authenticate to the network. When I do a TCP dump of the outside I see that PFsense is NATing the packet in the inside.
Outside: 172.16.1.251=wireless controller 172.16.25.0\24=WAP's
08:44:38.171060 IP 172.16.1.251.5247 > 172.16.25.46.23575: UDP, length 92
08:44:38.225543 IP 172.16.1.251.5247 > 172.16.25.46.23575: UDP, length 81
08:44:38.229372 IP 172.16.25.46.23575 > 172.16.1.251.5247: UDP, length 100
08:44:38.244101 IP 172.16.25.46.23575 > 172.16.1.251.5247: UDP, length 80
08:44:38.244225 IP 172.16.25.44.23577 > 172.16.1.251.5247: UDP, length 79Inside:
08:45:10.758384 IP pfsense.ecdp.local.29160 > 172.16.1.251.5247: UDP, length 109
08:45:10.811976 IP pfsense.ecdp.local.18915 > 172.16.1.251.5247: UDP, length 109
08:45:10.903608 IP 172.16.1.251.5247 > 172.16.25.46.23575: UDP, length 81
08:45:10.905796 IP 172.16.25.46.23575 > 172.16.1.251.5247: UDP, length 100
08:45:10.961139 IP 172.16.25.46.23575 > 172.16.1.251.5247: UDP, length 89My question is why is it NATing, and is there a way to keep it from NATing that packet?
-
"My question is why is it NATing, and is there a way to keep it from NATing that packet?"
Why is it natting? Because be default pfsense is set to NAT.. If you just want to use it as a router, then
http://doc.pfsense.org/index.php/How_can_I_completely_disable_NAT%3F#Disable_NAT
