Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access Back-haul Radios

    Scheduled Pinned Locked Moved NAT
    37 Posts 4 Posters 25.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hotshottech
      last edited by

      Yes see attached….

      post7.png
      post7.png_thumb

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Why is the gear showing on that rule?  That means you messed with the advanced setion of the rules.  So see hits to it..  So sniff on your wan when you try and connect do you see your traffic going out?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Yeah. Mouse over that gear on the bypass policy routing rule. Why is that there?

          What are your current outbound NAT rules?

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • H
            hotshottech
            last edited by

            The gear was there because I had a In and Out Limit…I have removed that...see attached

            Post1.png
            Post1.png_thumb

            1 Reply Last reply Reply Quote 0
            • H
              hotshottech
              last edited by

              I got it going…..here are the rules that got me there.

              Thanks guys for all the help....see attached

              Post2.png
              Post2.png_thumb
              post3.png
              post3.png_thumb

              O 1 Reply Last reply Reply Quote 0
              • H
                hotshottech
                last edited by

                And I also had to add a VIP on the 192.168.1.x/24 network.

                Hope this helps somebody else.

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  Yeah. johnpoz said that in #3.

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Actually Derelict.. Lets see stated multiple times to create a vip in reply #1, then again in #3 and then #5 and then #7 and then #14…. that was just on the first page ;)

                    And then reported on this page 3 of the thread that he has his mask wrong on his vip.. he had a /32, etc..

                    Got to love how a 15 second thing to do runs into days and days ;)  Really all that was need to do was given in my reply #1

                    If he wasn't forcing traffic out a gateway this would of been working days ago..

                    edit: 3 pages of trying to help this guy, not 1 thank you.. And then from his last post he makes it like we never told him to create a vip hehehe  Got to love it...

                    Why would you create ind rules like that?  Why would you not just use an alias or /cidr dest?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • H
                      hotshottech
                      last edited by

                      The last post that you did johnpoz where I have the gateway not correct did the trick…..I hade the VIP set correct after you 1st post....

                      Thanks a lot guys....I will say it again Thanks, Thanks Thanks johnpoz

                      You got to like newbies.....but one day I know I will be able to contribute to this forum.

                      1 Reply Last reply Reply Quote 0
                      • O
                        oilahkestrada @hotshottech
                        last edited by

                        @hotshottech said in Access Back-haul Radios:

                        I got it going…..here are the rules that got me there.

                        Thanks guys for all the help....see attached

                        Post2.png
                        Post2.png_thumb
                        post3.png
                        post3.png_thumb

                        Hi! I also have a same problem...
                        ISP Router Modem (DHCP) 192.168.2.1-RADIO(192.168.30.X)-RADIO(192.168.30.Y)-PFSENSE(192.168.2.1)

                        sadly, can't see the attached files...

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.