Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Outbound works fine, but cannot make inbound connections

    Scheduled Pinned Locked Moved NAT
    11 Posts 3 Posters 782 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      automate
      last edited by

      So i fixed this.

      Question though, my port forwards specify WAN. When the WAN fails and moves to the 4G interface, the NAT's won't work.

      Do I need to create new port forwards for the 4G interface using different inbound ports as theres no way to make the NAT interface ANY, or WAN and 4G at the same time.

      Thanks

      1 Reply Last reply Reply Quote 0
      • A
        akuma1x
        last edited by

        @automate You should be able to "duplicate" your working WAN NAT rules, change them to the 4G interface, and run them alongside the WAN rules at the same time. I have never tried it like that, but it should work.

        Jeff

        A 1 Reply Last reply Reply Quote 1
        • A
          automate @akuma1x
          last edited by

          @akuma1x And this is exactly what I've done, I also did that for the NAT

          I assume I can run the same inbound port for the port forwards given the interface is different?

          ie: 6150 inbound on WAN maps to 3389 on LAN
          6150 inbound on 4G maps to 3389 on LAN

          1 Reply Last reply Reply Quote 0
          • B
            biggsy
            last edited by biggsy

            @automate

            How did you get a Telstra 4G connection that's not behind a CG NAT?

            My Netgear LB2120 always gets a 10.x.y.z address.

            BTW, I wouldn't port forward to 3389 (RDP). Much better to use a VPN.

            1 Reply Last reply Reply Quote 0
            • A
              automate
              last edited by

              How, use a business grade mobile broadband plan with a public IP.

              I've locked 3389 down. It's fine

              1 Reply Last reply Reply Quote 0
              • B
                biggsy
                last edited by

                Ah, business plan. Thanks.
                Didn't know you could opt for that. Is it a fixed IP?
                I'm looking for something to give me a fail-over once I'm forced on to NBN/HFC.

                1 Reply Last reply Reply Quote 0
                • A
                  automate
                  last edited by

                  Yes, fixed/static :)

                  B 1 Reply Last reply Reply Quote 0
                  • B
                    biggsy @automate
                    last edited by

                    @automate

                    Thanks again and, yes, no problem running the same port forwards on two interfaces.

                    1 Reply Last reply Reply Quote 0
                    • A
                      automate
                      last edited by

                      Thanks ill give it a go.

                      I had an initiation stab but it wouldn't work.

                      I couldn't connect in, i need to check the routing... as the default may be via the WAN. So how would it route the traffic back via the 4G if it came in the 4G interface?

                      B 1 Reply Last reply Reply Quote 0
                      • B
                        biggsy @automate
                        last edited by

                        @automate

                        If you've removed the source alias from both, your NAT and corresponding rule look OK to me.

                        There was a problem with the LB2120 in bridge mode

                        Are you on the latest LB2120 firmware?

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.