Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Automatic NAT BROKEN

    Scheduled Pinned Locked Moved NAT
    26 Posts 5 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mountainlion
      last edited by

      I changed the LAN IP address. DHCP works, dns and ping to FW works. Not Internet from that LAN. (I can ping out from WAN interface) I look at working deployments and it has a AUTOMATIC entry. This FW doesnt. I tried to manually add, no good. and to reboot, no good.
      Whats going on PFS experts?

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        So you changed your outbound nat? From automatic?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • M
          mountainlion
          last edited by

          I changed the LAN IP on the PFSense

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            And your nat is automatic - or did you change that to manual? or something.. Post up screenshot of your outbound nat tab..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • M
              mountainlion
              last edited by

              0_1544471623192_4392d701-e435-4c52-93b1-63b0668dd0c2-image.png

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                You have NO nats so no shit its not going to work.

                Did you reboot to see if that clears it up?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • M
                  mountainlion
                  last edited by

                  Did the reboot, no good. Any ideas? Was working on the previous LAN subnet...

                  1 Reply Last reply Reply Quote 0
                  • S
                    SteveITS Galactic Empire
                    last edited by

                    What if you set Outbound NAT to something else, save it, and change back to Automatic again? Does it recreate the mappings? "Automatic" mappings should show but in light gray instead of black text.

                    You can manually create one I suppose....interface WAN, your LAN subnet, NAT Address = "WAN Address".

                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                    Upvote ๐Ÿ‘ helpful posts!

                    M 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      did you happen to put a gateway on your lan, so that pfsense thinks its WAN now?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mountainlion @SteveITS
                        last edited by

                        @teamits I did that to no avail. I have a work around though. I switched to the 2nd option "Hybrid" and added a any any rule. Access to interwebz! I seem to find a bug. What to do?

                        1 Reply Last reply Reply Quote 0
                        • M
                          mountainlion @johnpoz
                          last edited by

                          @johnpoz do you mean, is there another gateway in the same IP range and/or in the same broadcast domain? Or are you asking if I toggled the PFS interface to make the LAN and gateway? No to both.

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Its not a bug.. There is something wrong with your setup sure... But if it was a bug the place would be flooded with issues.

                            I have changed lan IP many many times and have never seen this sort of issue.

                            Your running 2.4.4p1?

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                            M 1 Reply Last reply Reply Quote 0
                            • chpalmerC
                              chpalmer
                              last edited by

                              LAN and WAN in same subnets?

                              M 1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                Make sure that:

                                1. WAN has a gateway selected on Interfaces > WAN (if static) or that it's set for a dynamic type (DHCP, PPPoE, etc)
                                2. LAN does not have a gateway set on Interfaces > LAN

                                Having a gateway selected will cause pfSense to treat the interface like a WAN, which means it won't have its subnet setup for automatic outbound NAT.

                                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                M 1 Reply Last reply Reply Quote 1
                                • M
                                  mountainlion @johnpoz
                                  last edited by

                                  @johnpoz thanks for your reply, yeah, running 2.4.4p1. There isnt much to the setup in question. I changed the IP on the LAN, nat overload isnt working auto-magically. Manual is working.
                                  This seems like a bug.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mountainlion @chpalmer
                                    last edited by

                                    @chpalmer LANs are LAN, OPT1-OPT5... I have segmentation, traffic, running perfectly, OSPF peered to another PFS.. the world is my oyster.
                                    However after changing my LAN address, I changed my DHCP scope, no joy. Rebooted the VM. No joy, Reboot the Hypervisor no joy. Added rule and switched to Hybrid, access restored. However, Automatic isnt working. Its a bug.

                                    1 Reply Last reply Reply Quote 0
                                    • chpalmerC
                                      chpalmer
                                      last edited by

                                      I change LAN addresses all the time from default. If there was a bug I for sure would have seen it. If there is a bug then hundreds would be coming here for answers.

                                      Does the WAN address of that box fall into the LAN subnet you are having trouble with?

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        mountainlion @jimp
                                        last edited by

                                        @jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)
                                        0_1544481385010_4e05a531-dfcf-4e95-80cc-3999d66a9f04-image.png

                                        0_1544481471359_2643e001-dc08-47e8-8203-283808b1c1ba-image.png

                                        1 Reply Last reply Reply Quote 0
                                        • chpalmerC
                                          chpalmer
                                          last edited by

                                          This post is deleted!
                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            @mountainlion said in Automatic NAT BROKEN:

                                            @jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)

                                            That does not tell us anything about Interfaces > WAN and if you have chosen a gateway on that page.

                                            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.