Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access Back-haul Radios

    Scheduled Pinned Locked Moved NAT
    37 Posts 4 Posters 25.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hotshottech
      last edited by

      I need to set a gateway out to the 192.168.1.x/24 but not sure how to get that done…

      Please explain...thanks

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Why do you need a gateway?  Once you create a vip in the network the p2p address are on, and you nat to that vip.

        You said you can ping the p2p IPs from pfsense.  So your vip is working, you create the nat so when your clients go there pfsense nats it to its vip.  Your p2p clients think your talking to them from an IP on their network.

        Problem I saw as that your lan rules were not going to allow your clients to use the vip, since forcing it down the the gateway.  Just put a rule above that that allows access to that p2p network.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • H
          hotshottech
          last edited by

          Not sure if this is correct. I tried this and it doesn't work…. see attached

          post6.png
          post6.png_thumb

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            and is that rule at the top?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • H
              hotshottech
              last edited by

              Yes see attached….

              post7.png
              post7.png_thumb

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Why is the gear showing on that rule?  That means you messed with the advanced setion of the rules.  So see hits to it..  So sniff on your wan when you try and connect do you see your traffic going out?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Yeah. Mouse over that gear on the bypass policy routing rule. Why is that there?

                  What are your current outbound NAT rules?

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • H
                    hotshottech
                    last edited by

                    The gear was there because I had a In and Out Limit…I have removed that...see attached

                    Post1.png
                    Post1.png_thumb

                    1 Reply Last reply Reply Quote 0
                    • H
                      hotshottech
                      last edited by

                      I got it going…..here are the rules that got me there.

                      Thanks guys for all the help....see attached

                      Post2.png
                      Post2.png_thumb
                      post3.png
                      post3.png_thumb

                      O 1 Reply Last reply Reply Quote 0
                      • H
                        hotshottech
                        last edited by

                        And I also had to add a VIP on the 192.168.1.x/24 network.

                        Hope this helps somebody else.

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          Yeah. johnpoz said that in #3.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Actually Derelict.. Lets see stated multiple times to create a vip in reply #1, then again in #3 and then #5 and then #7 and then #14…. that was just on the first page ;)

                            And then reported on this page 3 of the thread that he has his mask wrong on his vip.. he had a /32, etc..

                            Got to love how a 15 second thing to do runs into days and days ;)  Really all that was need to do was given in my reply #1

                            If he wasn't forcing traffic out a gateway this would of been working days ago..

                            edit: 3 pages of trying to help this guy, not 1 thank you.. And then from his last post he makes it like we never told him to create a vip hehehe  Got to love it...

                            Why would you create ind rules like that?  Why would you not just use an alias or /cidr dest?

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • H
                              hotshottech
                              last edited by

                              The last post that you did johnpoz where I have the gateway not correct did the trick…..I hade the VIP set correct after you 1st post....

                              Thanks a lot guys....I will say it again Thanks, Thanks Thanks johnpoz

                              You got to like newbies.....but one day I know I will be able to contribute to this forum.

                              1 Reply Last reply Reply Quote 0
                              • O
                                oilahkestrada @hotshottech
                                last edited by

                                @hotshottech said in Access Back-haul Radios:

                                I got it going…..here are the rules that got me there.

                                Thanks guys for all the help....see attached

                                Post2.png
                                Post2.png_thumb
                                post3.png
                                post3.png_thumb

                                Hi! I also have a same problem...
                                ISP Router Modem (DHCP) 192.168.2.1-RADIO(192.168.30.X)-RADIO(192.168.30.Y)-PFSENSE(192.168.2.1)

                                sadly, can't see the attached files...

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.