Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access Back-haul Radios

    Scheduled Pinned Locked Moved NAT
    37 Posts 4 Posters 25.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hotshottech
      last edited by

      Not sure if this is correct. I tried this and it doesn't work…. see attached

      post6.png
      post6.png_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        and is that rule at the top?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • H
          hotshottech
          last edited by

          Yes see attached….

          post7.png
          post7.png_thumb

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Why is the gear showing on that rule?  That means you messed with the advanced setion of the rules.  So see hits to it..  So sniff on your wan when you try and connect do you see your traffic going out?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              Yeah. Mouse over that gear on the bypass policy routing rule. Why is that there?

              What are your current outbound NAT rules?

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • H
                hotshottech
                last edited by

                The gear was there because I had a In and Out Limit…I have removed that...see attached

                Post1.png
                Post1.png_thumb

                1 Reply Last reply Reply Quote 0
                • H
                  hotshottech
                  last edited by

                  I got it going…..here are the rules that got me there.

                  Thanks guys for all the help....see attached

                  Post2.png
                  Post2.png_thumb
                  post3.png
                  post3.png_thumb

                  O 1 Reply Last reply Reply Quote 0
                  • H
                    hotshottech
                    last edited by

                    And I also had to add a VIP on the 192.168.1.x/24 network.

                    Hope this helps somebody else.

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Yeah. johnpoz said that in #3.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Actually Derelict.. Lets see stated multiple times to create a vip in reply #1, then again in #3 and then #5 and then #7 and then #14…. that was just on the first page ;)

                        And then reported on this page 3 of the thread that he has his mask wrong on his vip.. he had a /32, etc..

                        Got to love how a 15 second thing to do runs into days and days ;)  Really all that was need to do was given in my reply #1

                        If he wasn't forcing traffic out a gateway this would of been working days ago..

                        edit: 3 pages of trying to help this guy, not 1 thank you.. And then from his last post he makes it like we never told him to create a vip hehehe  Got to love it...

                        Why would you create ind rules like that?  Why would you not just use an alias or /cidr dest?

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • H
                          hotshottech
                          last edited by

                          The last post that you did johnpoz where I have the gateway not correct did the trick…..I hade the VIP set correct after you 1st post....

                          Thanks a lot guys....I will say it again Thanks, Thanks Thanks johnpoz

                          You got to like newbies.....but one day I know I will be able to contribute to this forum.

                          1 Reply Last reply Reply Quote 0
                          • O
                            oilahkestrada @hotshottech
                            last edited by

                            @hotshottech said in Access Back-haul Radios:

                            I got it going…..here are the rules that got me there.

                            Thanks guys for all the help....see attached

                            Post2.png
                            Post2.png_thumb
                            post3.png
                            post3.png_thumb

                            Hi! I also have a same problem...
                            ISP Router Modem (DHCP) 192.168.2.1-RADIO(192.168.30.X)-RADIO(192.168.30.Y)-PFSENSE(192.168.2.1)

                            sadly, can't see the attached files...

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.