Automatic NAT BROKEN

mountainlion · Dec 10, 2018, 7:23 PM

I changed the LAN IP address. DHCP works, dns and ping to FW works. Not Internet from that LAN. (I can ping out from WAN interface) I look at working deployments and it has a AUTOMATIC entry. This FW doesnt. I tried to manually add, no good. and to reboot, no good.
Whats going on PFS experts?

johnpoz · Dec 10, 2018, 7:30 PM

So you changed your outbound nat? From automatic?

mountainlion · Dec 10, 2018, 7:32 PM

I changed the LAN IP on the PFSense

johnpoz · Dec 10, 2018, 7:45 PM

And your nat is automatic - or did you change that to manual? or something.. Post up screenshot of your outbound nat tab..

mountainlion · Dec 10, 2018, 7:53 PM

johnpoz · Dec 10, 2018, 8:09 PM

You have NO nats so no shit its not going to work.

Did you reboot to see if that clears it up?

mountainlion · Dec 10, 2018, 8:13 PM

Did the reboot, no good. Any ideas? Was working on the previous LAN subnet...

SteveITS · Dec 10, 2018, 8:18 PM

What if you set Outbound NAT to something else, save it, and change back to Automatic again? Does it recreate the mappings? "Automatic" mappings should show but in light gray instead of black text.

You can manually create one I suppose....interface WAN, your LAN subnet, NAT Address = "WAN Address".

johnpoz · Dec 10, 2018, 8:21 PM

did you happen to put a gateway on your lan, so that pfsense thinks its WAN now?

mountainlion · Dec 10, 2018, 8:28 PM

@teamits I did that to no avail. I have a work around though. I switched to the 2nd option "Hybrid" and added a any any rule. Access to interwebz! I seem to find a bug. What to do?

mountainlion · Dec 10, 2018, 8:33 PM

@johnpoz do you mean, is there another gateway in the same IP range and/or in the same broadcast domain? Or are you asking if I toggled the PFS interface to make the LAN and gateway? No to both.

johnpoz · Dec 10, 2018, 9:07 PM

Its not a bug.. There is something wrong with your setup sure... But if it was a bug the place would be flooded with issues.

I have changed lan IP many many times and have never seen this sort of issue.

Your running 2.4.4p1?

chpalmer · Dec 10, 2018, 9:31 PM

LAN and WAN in same subnets?

jimp · Dec 10, 2018, 9:55 PM

Make sure that:

WAN has a gateway selected on Interfaces > WAN (if static) or that it's set for a dynamic type (DHCP, PPPoE, etc)
LAN does not have a gateway set on Interfaces > LAN

Having a gateway selected will cause pfSense to treat the interface like a WAN, which means it won't have its subnet setup for automatic outbound NAT.

mountainlion · Dec 10, 2018, 10:28 PM

@johnpoz thanks for your reply, yeah, running 2.4.4p1. There isnt much to the setup in question. I changed the IP on the LAN, nat overload isnt working auto-magically. Manual is working.
This seems like a bug.

mountainlion · Dec 10, 2018, 10:31 PM

@chpalmer LANs are LAN, OPT1-OPT5... I have segmentation, traffic, running perfectly, OSPF peered to another PFS.. the world is my oyster.
However after changing my LAN address, I changed my DHCP scope, no joy. Rebooted the VM. No joy, Reboot the Hypervisor no joy. Added rule and switched to Hybrid, access restored. However, Automatic isnt working. Its a bug.

chpalmer · Dec 10, 2018, 10:36 PM

I change LAN addresses all the time from default. If there was a bug I for sure would have seen it. If there is a bug then hundreds would be coming here for answers.

Does the WAN address of that box fall into the LAN subnet you are having trouble with?

mountainlion · Dec 10, 2018, 10:39 PM

@jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)

chpalmer · Dec 10, 2018, 10:41 PM

This post is deleted!

jimp · Dec 10, 2018, 10:43 PM

@mountainlion said in Automatic NAT BROKEN:

@jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)

That does not tell us anything about Interfaces > WAN and if you have chosen a gateway on that page.