Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Automatic NAT BROKEN

    Scheduled Pinned Locked Moved NAT
    26 Posts 5 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mountainlion @SteveITS
      last edited by

      @teamits I did that to no avail. I have a work around though. I switched to the 2nd option "Hybrid" and added a any any rule. Access to interwebz! I seem to find a bug. What to do?

      1 Reply Last reply Reply Quote 0
      • M
        mountainlion @johnpoz
        last edited by

        @johnpoz do you mean, is there another gateway in the same IP range and/or in the same broadcast domain? Or are you asking if I toggled the PFS interface to make the LAN and gateway? No to both.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          Its not a bug.. There is something wrong with your setup sure... But if it was a bug the place would be flooded with issues.

          I have changed lan IP many many times and have never seen this sort of issue.

          Your running 2.4.4p1?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          M 1 Reply Last reply Reply Quote 0
          • chpalmerC
            chpalmer
            last edited by

            LAN and WAN in same subnets?

            M 1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              Make sure that:

              1. WAN has a gateway selected on Interfaces > WAN (if static) or that it's set for a dynamic type (DHCP, PPPoE, etc)
              2. LAN does not have a gateway set on Interfaces > LAN

              Having a gateway selected will cause pfSense to treat the interface like a WAN, which means it won't have its subnet setup for automatic outbound NAT.

              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              M 1 Reply Last reply Reply Quote 1
              • M
                mountainlion @johnpoz
                last edited by

                @johnpoz thanks for your reply, yeah, running 2.4.4p1. There isnt much to the setup in question. I changed the IP on the LAN, nat overload isnt working auto-magically. Manual is working.
                This seems like a bug.

                1 Reply Last reply Reply Quote 0
                • M
                  mountainlion @chpalmer
                  last edited by

                  @chpalmer LANs are LAN, OPT1-OPT5... I have segmentation, traffic, running perfectly, OSPF peered to another PFS.. the world is my oyster.
                  However after changing my LAN address, I changed my DHCP scope, no joy. Rebooted the VM. No joy, Reboot the Hypervisor no joy. Added rule and switched to Hybrid, access restored. However, Automatic isnt working. Its a bug.

                  1 Reply Last reply Reply Quote 0
                  • chpalmerC
                    chpalmer
                    last edited by

                    I change LAN addresses all the time from default. If there was a bug I for sure would have seen it. If there is a bug then hundreds would be coming here for answers.

                    Does the WAN address of that box fall into the LAN subnet you are having trouble with?

                    1 Reply Last reply Reply Quote 0
                    • M
                      mountainlion @jimp
                      last edited by

                      @jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)
                      0_1544481385010_4e05a531-dfcf-4e95-80cc-3999d66a9f04-image.png

                      0_1544481471359_2643e001-dc08-47e8-8203-283808b1c1ba-image.png

                      1 Reply Last reply Reply Quote 0
                      • chpalmerC
                        chpalmer
                        last edited by

                        This post is deleted!
                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          @mountainlion said in Automatic NAT BROKEN:

                          @jimp I think I have those parameters setup properly. Good suggestion, but not helping me, there is an explanation for this :) (previously mentioned)

                          That does not tell us anything about Interfaces > WAN and if you have chosen a gateway on that page.

                          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mountainlion @jimp
                            last edited by

                            @jimp
                            thanks for your reply, I just looked and it seems on the WAN page, I DONT have gateway selected in drop down..[ NONE ] for the GATEWAY in that field. Yet I do have a Gateway setup in the other picture. I guess you are saying I screwed up and should have that drop down selected? If so, sorry for the fire drill. As Inbound and outbound access works as is. Just not the auto NAT.

                            0_1544484214165_49f8ab0c-bd1c-4f9f-bcb2-0ad0d19ddcd5-image.png

                            0_1544484321727_60aef3e0-c171-476b-a086-3019e695ac68-image.png

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              You must have a gateway selected on Interfaces > WAN or pfSense doesn't know it's a WAN-type interface, this won't use it for automatic outbound NAT.

                              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                mountainlion @jimp
                                last edited by mountainlion

                                @jimp
                                So just to be 100% clear for those that follow. I need to choose a WAN GW in that drop down for OUTBOUND NAT to auto generate. Does that drop down have any other functions? I will change that setting when I see traffic bleed off a bit more. My expectation is that after I do this I will see the OUTBOUND NAT section with auto populate now? Thanks again.

                                1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate
                                  last edited by

                                  Read the docs if you need more info. I've already explained it more than once.

                                  Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    Yet again some self inflected PEBKAC problem where the user screaming bug..

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mountainlion @johnpoz
                                      last edited by mountainlion

                                      @johnpoz I based my assertion, on a bad assumption. I asked for expert help. When nobody could tell me I missed something, there seemed only one explanation. No need for the kiddy stuff, we are all just trying to get this open source tool working for ourselves, correct? Apologizes to the team for bug talk.

                                      1 Reply Last reply Reply Quote 1
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.