Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Mixed NAT and routing

    Scheduled Pinned Locked Moved NAT
    5 Posts 3 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      aray
      last edited by

      Hi All,

      I'm running pfsense embedded (recent version).  I have 3 interfaces
      WAN (PPPoE)
      LAN (a PUBLIC ip range /28 network) - to be routed
      OPT1 (a PRIVATE ip range) - to be nat'ed

      I am a bit lost as to how to enable normal routing,  etc for the LAN (public ips)
      And at the same time, enable NAT for the OPT1 (PRIVATE ips).

      If I put a public IP range in the LAN interface, is pfsense smart enough to realise it's not a RFC1918 (private) range and just apply routing?

      I see the option to disable all firewall/nat - but I don't want that globally (just for one of the interfaces)

      If I do manual nat mappings, will it allow routing for the other (non-nat) interfaces?

      I am unable to test the configuration before I put it into production (hence the nervousness)

      Any direction greatly appreciated.

      Thanks,
      Andrew

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Enable advanced outbound NAT
        firewall –> nat --> outbound

        Modify the autocreated rule (NAT from source:LAN-subnet to WAN interface) so it NAT's from the OPT1 subnet to the WAN interface.

        If you delete all the rules under AoN pfSense becomes a routing-plattform with firewall capabilities.

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • A
          aray
          last edited by

          Thanks very much for the quick reply.

          Also, another question.  When the PPPoE connection is established, will it automatically become the default gateway for the LAN interface?

          (there is no place for me to define this in the interfaces - if I go to system and static routes, I can only define by IP addresses, not by interface).

          Cheers,
          Andrew.

          1 Reply Last reply Reply Quote 0
          • N
            nocer
            last edited by

            Yes.

            It is done by some scripts to be run when the WAN(doesn't matter what the connection type is).
            Look for linkup scripts and see inside then you know what is going on while link is being established.

            cheers,

            1 Reply Last reply Reply Quote 0
            • A
              aray
              last edited by

              Thanks for the help :)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.