NAT rules for bubble network
-
Hello,
I would like to isolate some servers in our network from production network, but still allows some services to work. This is my situation
–----------------------- ---------------------------------------- ------------------------------------------ ------------------
| 30.0.0.0/16 | | Palo Alto router - only routing | | pfSense router with NAT | | bubble server |
| production network |-------| if1 30.0.0.1 if2 10.198.25.1 |------| WAN 10.198.25.254 LAN 30.0.01|---------------| 30.0.0.4 |
------------------------- ----------------------------------------- ----------------------------------------- ------------------I can see that a packet from my production network (let's say client with IP address 30.0.1.22) gets to my bubble server 30.0.0.4 with no problems so it looks like NAT is working. But the problem is that source IP in packet is still 30.0.1.22 (from production network) and that's why my bubble server doesn't send the response to the right address. I should somehow rewrite source IP address to go back to pfSense and than on pfSense send the response to the right client. Any idea how to do this?
Thank you!
Best wishes,
Marko -
Huh?? Why do you have the same lan network on pfsense as your production network??
You have 30.0/16 on your production network and then you show 30.0.0/? This would overlap.
