Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is this double NAT?

    Scheduled Pinned Locked Moved NAT
    13 Posts 4 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      shetu
      last edited by

      I install pfsense 2.2.4 in vmware workstation 7.0.0-203739. One Network adapter in bridge mode (dlink router DIR-803) and another nic using VMnet5.
      In pfsense I get those ip
      Wan : 192.168.11.176
      Lan : 192.168.1.1

      Do I need to rid of Dlink router to access remote pc in lan side or not?

      ![pfsense Dashboard.jpg](/public/imported_attachments/1/pfsense Dashboard.jpg)
      ![pfsense Dashboard.jpg_thumb](/public/imported_attachments/1/pfsense Dashboard.jpg_thumb)
      wan.jpg
      wan.jpg_thumb
      Firewall_rules.jpg
      Firewall_rules.jpg_thumb
      DMW.jpg
      DMW.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        "192.168.11.176"

        If pfsense wan has a rfc1918 address, then yeah you are behind a double nat if you have pfsense also natting to its lan.

        Get rid of your d-link and connect pfsense directly to your wan so it gets a public IP.  Then use that dlink as your AP if you want

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • S
          shetu
          last edited by

          Thanks. I will do this

          1 Reply Last reply Reply Quote 0
          • S
            shetu
            last edited by

            Hello
            i install pfsene in physical pc and add wan connection. but do not get public ip, only wan ip.
            note: my isp has all connection same public ip.

            wan.jpg
            wan.jpg_thumb
            ![New Adobe Photoshop Image copy.jpg_thumb](/public/imported_attachments/1/New Adobe Photoshop Image copy.jpg_thumb)
            ![New Adobe Photoshop Image copy.jpg](/public/imported_attachments/1/New Adobe Photoshop Image copy.jpg)

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Dude if your not getting a public IP then your behind a ISP nat..  So before you were triple nat, now your only double nat ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix
                last edited by

                That's IPv4.
                Maybe if you use IPv6 you get a public IP there?

                1 Reply Last reply Reply Quote 0
                • S
                  shetu
                  last edited by

                  Now what should i do? My isp can't help me about this matter, because they are only watch that I have internet connection or not.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    So do they forward inbound unsolicited traffic to your rfc1918 address?

                    Seems unlikely that this could be all of them and not just maybe if lucky a handful you can use since you state "my isp has all connection same public ip"

                    If you need unsolicited inbound traffic, change ISPs - or possible as mentioned IPv6 could be used?  But such a lame little isp I find this unlikely.  You could prob use a VPN that you run yourself on some vps to allow for inbound traffic to your setup.  Or leverage some vpn service that allows for forwarded traffic through the vpn to your end point.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott
                      last edited by

                      Now what should i do? My isp can't help me about this matter, because they are only watch that I have internet connection or not.

                      A big problem these days is many ISPs don't have any global unicast addresses available to give to customers, which means they are forced to use NAT.  That appears to be the case with you.  There is no way around it on IpV4.  The only way around it is IPv6.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        ^ this is true when use up all the IPv4 space ;)

                        Blame can be spread around to all over the place.. ISPs, companies not giving back when they have no real use of the space they have, etc.  We have /16 and can tell you we use very small % of that..  Starting to get emails asking to rent some of our IPv4's

                        As mentioned your only solution is to use IPv6 - which if your isp has no ipv4s to work with you would think they would be pushing their clients to ipv6.  Move to a bigger ISP is your other solution.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott
                          last edited by

                          ISPs, companies not giving back when they have no real use of the space they have, etc.

                          Even if they all gave back the unused IP address blocks, there still wouldn't be enough.  There are already more mobile devices than there are IPv4 addresses.  The only situation, which should have happened years ago, is IPv6.  I've been running it for 7 years, but first heard of it 22 years ago.

                          I really get fed up with those who claim IPv4 is good enough, NAT will extend addresses, companies can give back unused blocks etc..

                          IPv4 has been inadequate for years, ever since NAT became necessary due to the address shortage.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Agree I have been using ipv6 for many years.. Got my HE sage cert/tshirt back in 2011..

                            I am on tmobile phone and it doesn't get an IPv4 any more just IPv6.

                            Completely agree IPv6 is the future - but some better management of ipv4 could of staved off the exhaustion for some time.  There is prob little reason for any sort of mobile device to get a ipv4 address from LTE, etc.

                            Giving a school back in the day when internet first started a /8 was not forward thinking ;) heheh

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott
                              last edited by

                              I am on tmobile phone and it doesn't get an IPv4 any more just IPv6.

                              Mine too.  My cell carrier uses 464XLAT to provide IPv4 support.

                              Giving a school back in the day when internet first started a /8 was not forward thinking ;) heheh

                              Of course, that predated personal computers, tablets, cell phones etc.  The 32 bit addresses were intended only to be for a demonstration, with larger addresses when "officially released" at least according to Vint Cerf.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.