<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Double NAT problem]]></title><description><![CDATA[<p dir="auto">Hi</p>
<p dir="auto">I have a firewall hardware (192.168.1.1) with pfSense 2.3.2 64 bit which manages a LAN (192.168.1.0) with 8 network devices with fixed IPs.</p>
<p dir="auto">On the WAN port of the firewall, I connected a VDSL2 router (10.0.0.1) that manages the Internet connection and provides Internet to the LAN.</p>
<p dir="auto">To get Internet on the LAN, unfortunately, I have to enable the router's NAT.</p>
<p dir="auto">So now, my LAN sees both the firewall NAT is that of the VDSL2 router causing some problems on the LAN.</p>
<p dir="auto">So how should I configure pfSense to make sure that the LAN only see the firewall's NAT?</p>
<p dir="auto">The firewall and router configuration is:</p>
<p dir="auto"><img src="http://i66.tinypic.com/ao71a1.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i64.tinypic.com/2e2qxqt.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i65.tinypic.com/11wbuxx.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i63.tinypic.com/devju9.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i67.tinypic.com/a4r0g8.jpg" alt="" class=" img-fluid img-markdown" /></p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/topic/108434/double-nat-problem</link><generator>RSS for Node</generator><lastBuildDate>Tue, 08 Sep 2026 16:31:16 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/108434.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 28 Nov 2016 10:43:52 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Double NAT problem on Tue, 06 Dec 2016 10:03:36 GMT]]></title><description><![CDATA[<p dir="auto">If I had to do in this way:</p>
<p dir="auto"><img src="http://i66.tinypic.com/zn206r.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i67.tinypic.com/wi3ghs.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i63.tinypic.com/2wqtnnk.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i68.tinypic.com/sm3m6t.jpg" alt="" class=" img-fluid img-markdown" /></p>
<p dir="auto">I would still have the Internet service on the LAN?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/665267</link><guid isPermaLink="true">https://forum.netgate.com/post/665267</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Tue, 06 Dec 2016 10:03:36 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Mon, 05 Dec 2016 17:29:43 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/hda">@<bdi>hda</bdi></a>:</p>
<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/balubeto">@<bdi>balubeto</bdi></a>:</p>
<blockquote>
<p dir="auto">Where am I wrong?</p>
</blockquote>
<p dir="auto">Besides Trial &amp; Horror, read #12 again. Remove that gateway for the LAN…</p>
</blockquote>
<p dir="auto">I deleted the gateway that was always offline.The router's NAT causes some malfunctions and slowdowns in the LAN.</p>
<p dir="auto">If, though, off the NAT the LAN returns to work, but the Internet does not work on the LAN.If I put the router in Bridge mode (disabling its NAT and disconnecting the Internet connection) I should enable the PPPoE client on the firewall to manage the Internet on the LAN.</p>
<p dir="auto">In this case, but, the analog phone and fax machine connected to the router will not work.</p>
<p dir="auto">So how do I solve this problem of the phone and fax?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/665152</link><guid isPermaLink="true">https://forum.netgate.com/post/665152</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Mon, 05 Dec 2016 17:29:43 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sun, 04 Dec 2016 19:21:14 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/balubeto">@<bdi>balubeto</bdi></a>:</p>
<blockquote>
<p dir="auto">Where am I wrong?</p>
</blockquote>
<p dir="auto">Besides Trial &amp; Horror, read #12 again. Remove that gateway for the LAN…</p>
]]></description><link>https://forum.netgate.com/post/664960</link><guid isPermaLink="true">https://forum.netgate.com/post/664960</guid><dc:creator><![CDATA[hda]]></dc:creator><pubDate>Sun, 04 Dec 2016 19:21:14 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sun, 04 Dec 2016 18:19:34 GMT]]></title><description><![CDATA[<p dir="auto">I also tried to change the LAN gateway, but it is always offline.</p>
<p dir="auto"><img src="http://i65.tinypic.com/6qfmh4.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i64.tinypic.com/fxqa34.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i64.tinypic.com/1zya4om.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i66.tinypic.com/2ahwpkn.jpg" alt="" class=" img-fluid img-markdown" /></p>
<p dir="auto">Where am I wrong?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/664950</link><guid isPermaLink="true">https://forum.netgate.com/post/664950</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Sun, 04 Dec 2016 18:19:34 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sun, 04 Dec 2016 18:10:55 GMT]]></title><description><![CDATA[<p dir="auto">You should not set any gateway on LAN interface if the pfSense is the LAN gateway.</p>
]]></description><link>https://forum.netgate.com/post/664948</link><guid isPermaLink="true">https://forum.netgate.com/post/664948</guid><dc:creator><![CDATA[viragomann]]></dc:creator><pubDate>Sun, 04 Dec 2016 18:10:55 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sun, 04 Dec 2016 10:34:03 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/balubeto">@<bdi>balubeto</bdi></a>:</p>
<blockquote>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/ptt">@<bdi>ptt</bdi></a>:</p>
<blockquote>
<p dir="auto">???  LAN: 192.168.1.1 with "GW_LAN: 192.168.1.1"  ?</p>
<p dir="auto">https://doc.pfsense.org/index.php/Connectivity_Troubleshooting#LAN_Interface</p>
</blockquote>
<p dir="auto">So, what should I change?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
</blockquote>
<p dir="auto">If I set the LAN interface to 192.168.1.254, the Internet does not work anymore. Why?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/664887</link><guid isPermaLink="true">https://forum.netgate.com/post/664887</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Sun, 04 Dec 2016 10:34:03 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sun, 04 Dec 2016 08:15:46 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/ptt">@<bdi>ptt</bdi></a>:</p>
<blockquote>
<p dir="auto">???  LAN: 192.168.1.1 with "GW_LAN: 192.168.1.1"  ?</p>
<p dir="auto">https://doc.pfsense.org/index.php/Connectivity_Troubleshooting#LAN_Interface</p>
</blockquote>
<p dir="auto">So, what should I change?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/664873</link><guid isPermaLink="true">https://forum.netgate.com/post/664873</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Sun, 04 Dec 2016 08:15:46 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sat, 03 Dec 2016 21:59:39 GMT]]></title><description><![CDATA[<p dir="auto">???  LAN: 192.168.1.1 with "GW_LAN: 192.168.1.1"  ?</p>
<p dir="auto">https://doc.pfsense.org/index.php/Connectivity_Troubleshooting#LAN_Interface</p>
]]></description><link>https://forum.netgate.com/post/664815</link><guid isPermaLink="true">https://forum.netgate.com/post/664815</guid><dc:creator><![CDATA[ptt]]></dc:creator><pubDate>Sat, 03 Dec 2016 21:59:39 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Sat, 03 Dec 2016 09:25:22 GMT]]></title><description><![CDATA[<p dir="auto">I tried a new configuration of the firewall but the devices connected to the 192.168.1.0 network can still see the 10.0.0.0 network NAT causing malfunctions to the main network.</p>
<p dir="auto">If I disable the NAT of the 10.0.0.0 network, the first network returns to work properly but I have no more Internet on this network.</p>
<p dir="auto">So how should I do to make sure that the main network does not see the secondary network NAT?</p>
<p dir="auto">The new firewall (192.168.1.1) and VDSL2 router (10.0.0.1) configuration  is:</p>
<p dir="auto"><img src="http://i63.tinypic.com/2n7e534.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i64.tinypic.com/2q37sp0.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i68.tinypic.com/w2dmki.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i63.tinypic.com/34qwe2f.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i63.tinypic.com/fege11.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i63.tinypic.com/2w74b3m.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i66.tinypic.com/1zx08k0.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i67.tinypic.com/vcusdu.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i66.tinypic.com/d6645.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i68.tinypic.com/fa0z60.jpg" alt="" class=" img-fluid img-markdown" /><br />
<img src="http://i66.tinypic.com/6ynwvd.jpg" alt="" class=" img-fluid img-markdown" /></p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/664727</link><guid isPermaLink="true">https://forum.netgate.com/post/664727</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Sat, 03 Dec 2016 09:25:22 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Wed, 30 Nov 2016 08:50:20 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/jknott">@<bdi>JKnott</bdi></a>:</p>
<blockquote>
<p dir="auto">How is your equipment connected?  I can't imagine any scenario in which a computer could see both, unless somehow connected to both.  Normally, when you have double NAT, you see only the one you're connected to.</p>
</blockquote>
<p dir="auto">My LAN is composed of a hardware firewall, a NAS, a network printer, two smart TV and 6 computers with Windows 7 SP1. Also, I have a VDSL2 router, connected to the WAN port on the firewall, which provides Internet to the LAN.</p>
<p dir="auto">All of these network devices have fixed IPs and have the DHCP disabled.</p>
<p dir="auto">So why computers even see the router's NAT?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/664086</link><guid isPermaLink="true">https://forum.netgate.com/post/664086</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Wed, 30 Nov 2016 08:50:20 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 20:41:30 GMT]]></title><description><![CDATA[<p dir="auto">How is your equipment connected?  I can't imagine any scenario in which a computer could see both, unless somehow connected to both.  Normally, when you have double NAT, you see only the one you're connected to.</p>
]]></description><link>https://forum.netgate.com/post/664018</link><guid isPermaLink="true">https://forum.netgate.com/post/664018</guid><dc:creator><![CDATA[JKnott]]></dc:creator><pubDate>Tue, 29 Nov 2016 20:41:30 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 18:47:41 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/viragomann">@<bdi>viragomann</bdi></a>:</p>
<blockquote>
<p dir="auto">Yeah, it should work properly with this setting.</p>
<p dir="auto">What's the problem?<br />
The crucial sentence in your first post<br />
<a class="plugin-mentions-user plugin-mentions-a" href="/user/balubeto">@<bdi>balubeto</bdi></a>:</p>
<blockquote>
<p dir="auto">So now, my LAN sees both the firewall NAT is that of the VDSL2 router causing some problems on the LAN.</p>
</blockquote>
<p dir="auto">isn't understandable.</p>
</blockquote>
<p dir="auto">My computers with Windows 7 SP1 on the LAN see two NAT.</p>
<p dir="auto">Whereas if I unplug the VDSL2 router from the firewall, the computers see an only NAT and, therefore, the LAN is working properly.</p>
<p dir="auto">So how do I fix this?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/663991</link><guid isPermaLink="true">https://forum.netgate.com/post/663991</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Tue, 29 Nov 2016 18:47:41 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 17:54:34 GMT]]></title><description><![CDATA[<p dir="auto">Yeah, it should work properly with this setting.</p>
<p dir="auto">What's the problem?<br />
The crucial sentence in your first post<br />
<a class="plugin-mentions-user plugin-mentions-a" href="/user/balubeto">@<bdi>balubeto</bdi></a>:</p>
<blockquote>
<p dir="auto">So now, my LAN sees both the firewall NAT is that of the VDSL2 router causing some problems on the LAN.</p>
</blockquote>
<p dir="auto">isn't understandable.</p>
]]></description><link>https://forum.netgate.com/post/663982</link><guid isPermaLink="true">https://forum.netgate.com/post/663982</guid><dc:creator><![CDATA[viragomann]]></dc:creator><pubDate>Tue, 29 Nov 2016 17:54:34 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 17:43:43 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/viragomann">@<bdi>viragomann</bdi></a>:</p>
<blockquote>
<p dir="auto">Just ensure that both routers do NAT in both direction. On the VDSL router this should be set by default.<br />
On pfSense this is default as well, you may check it in Firewall &gt; NAT &gt; Outbound. It should be set to automatic rule generation.</p>
<p dir="auto">Also ensure that "Block private networks and loopback addresses" is unchecked in the WAN interface settings, since you have a private WAN subnet.</p>
</blockquote>
<p dir="auto">These settings</p>
<p dir="auto"><img src="http://i64.tinypic.com/30cahzt.jpg" alt="" class=" img-fluid img-markdown" /></p>
<p dir="auto">are right?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/663981</link><guid isPermaLink="true">https://forum.netgate.com/post/663981</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Tue, 29 Nov 2016 17:43:43 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 16:56:13 GMT]]></title><description><![CDATA[<p dir="auto">Just ensure that both routers do NAT in both direction. On the VDSL router this should be set by default.<br />
On pfSense this is default as well, you may check it in Firewall &gt; NAT &gt; Outbound. It should be set to automatic rule generation.</p>
<p dir="auto">Also ensure that "Block private networks and loopback addresses" is unchecked in the WAN interface settings, since you have a private WAN subnet.</p>
]]></description><link>https://forum.netgate.com/post/663976</link><guid isPermaLink="true">https://forum.netgate.com/post/663976</guid><dc:creator><![CDATA[viragomann]]></dc:creator><pubDate>Tue, 29 Nov 2016 16:56:13 GMT</pubDate></item><item><title><![CDATA[Reply to Double NAT problem on Tue, 29 Nov 2016 15:53:57 GMT]]></title><description><![CDATA[<p dir="auto">In other words, how I should configure pfSense to ensure that the two NAT do not interfere with each other?</p>
<p dir="auto">Thanks</p>
<p dir="auto">Bye</p>
]]></description><link>https://forum.netgate.com/post/663959</link><guid isPermaLink="true">https://forum.netgate.com/post/663959</guid><dc:creator><![CDATA[balubeto]]></dc:creator><pubDate>Tue, 29 Nov 2016 15:53:57 GMT</pubDate></item></channel></rss>