Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT LAN address from one subnet to another LAN Subnet

    Scheduled Pinned Locked Moved NAT
    3 Posts 3 Posters 4.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Snailkhan
      last edited by

      hi
      i have three 4 subnets one wired lan .
      other three are wireless ssids.
      subnets are 192.168.4.0/24 of lan subnet and 192.168.12.0/24 for wifi subnet.
      i have a device on wifi subnet that i cannot access from a pc connected to the lan subnet.. cant ping it. cant telnet into the open ports when i am on lan subnet.

      however from pfsense can see it ping it and see the service port open.
      also accessible form wifi subnet.

      i found that that device doesnt have default gateway option in its ip settings and can only be acessible from same subnet.

      i want pfsense to NAT based a lan subnet ip like 192.168.4.123 to another ip on 192.168.12.123 instead of doing straigh forward routing between them.

      is it possible to do so ?
      the wifi subnet and lan subnet both resid on this pfsense box.

      regards

      1 Reply Last reply Reply Quote 0
      • V
        viragomann
        last edited by

        If the device just should be reachable from other subnets, not revers, do source NAT for it.

        Add an outbound NAT rule to the interface the device is connected to, source = any, destination = the address of that device, translation = interface address.
        The outbound NAT must be set to hybrid or manual rule generation.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          what device is it that does not allow you to set a gateway?  Doing a source nat is a work around, not the correct solution to the problem.  Your device is not meant to be used outside of its own layer 2 network for what reason?  What is the device?  Some wifi router your trying to use as AP?  If it supports putting 3rd party firmware on it like openwrt or dd-wrt, etc. this would allow you to set a gateway.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.