<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Port Forwarding &#x2F; NAT &#x2F; Routing Problem]]></title><description><![CDATA[<p dir="auto">Hello,</p>
<p dir="auto">I'm trying for 3 weeks getting my configuration running, without any success. I hope anyone of you guys can help me.<br />
My problem is to get running additional ip adresses, so my plan is to give every virtual machine a different ip address (OVH Failover IP)</p>
<p dir="auto"><strong>My Equipment:</strong></p>
<p dir="auto">ISP: <strong>OVH</strong><br />
Hypervisor: <strong>ESXi 6.0</strong><br />
Hypervisor IP: <strong>32.37.68.58</strong></p>
<p dir="auto">WAN</p>
<ul>
<li>
<p dir="auto">IPv4 Configuration Type: <strong>Static</strong></p>
</li>
<li>
<p dir="auto">IPv4 Address: <strong>5.196.111.243</strong></p>
</li>
<li>
<p dir="auto">IPv4 Upstream Gateway: <strong>32.37.68.254 /24</strong></p>
</li>
</ul>
<p dir="auto">LAN</p>
<ul>
<li>
<p dir="auto">IPv4 Configuration Type: <strong>Static</strong></p>
</li>
<li>
<p dir="auto">IPv4 Address:<strong>172.16.0.1 /24</strong></p>
</li>
<li>
<p dir="auto">IPv4 Upstream Gateway: <strong>None</strong></p>
</li>
</ul>
<p dir="auto">WAN2</p>
<ul>
<li>
<p dir="auto">IPv4 Configuration Type: <strong>Static</strong></p>
</li>
<li>
<p dir="auto">IPv4 Address: <strong>193.42.21.183</strong></p>
</li>
<li>
<p dir="auto">IPv4 Upstream Gateway: <strong>193.42.21.254 /24</strong> <em>(1.) Is this correct? I have choosen this because I can't select the same upstream gateway from WAN1)</em></p>
</li>
</ul>
<p dir="auto">LAN2</p>
<ul>
<li>
<p dir="auto">IPv4 Configuration Type: <strong>Static</strong></p>
</li>
<li>
<p dir="auto">IPv4 Address:<strong>172.16.2.1 /24</strong></p>
</li>
<li>
<p dir="auto">IPv4 Upstream Gateway: <strong>None</strong></p>
</li>
</ul>
<p dir="auto">pfsense -&gt; Gateways Settings:</p>
<p dir="auto">GW_WAN <strong>32.37.68.254        32.37.68.254</strong> Online<br />
GW_WAN2 <strong>193.42.21.254    193.42.21.254</strong> Offline <em>(2.) Why this one is colored offline?)</em></p>
<p dir="auto">#1 Firewall Rule:</p>
<p dir="auto">Action: <strong>Pass</strong><br />
Interface: <strong>WAN2</strong><br />
Address Family: <strong>IPv4</strong><br />
Protocol: <strong>TCP</strong><br />
Source: <strong>Any</strong><br />
Destination: <strong>Single host or alias -&gt; 193.42.21.183</strong><br />
Destination Port Range: <strong>from: SSH(22) to: SSH(22)</strong></p>
<p dir="auto">#2 Firewall Rule:</p>
<p dir="auto">Action: <strong>Pass</strong><br />
Interface: <strong>LAN2</strong><br />
Address Family: <strong>IPv4</strong><br />
Protocol: <strong>any</strong><br />
Source: <strong>LAN2 net</strong><br />
Destination: <strong>any</strong><br />
Advanced Options: Gateway: <strong>GW_WAN2 193.42.21.254</strong></p>
<p dir="auto">I want to SSH to a VM in 172.16.2.2 (which is in the LAN2)<br />
It looks like, the traffic goes to 172.16.2.2, but the pfsense can't send it to the source address.</p>
<p dir="auto">What I have tried and worked is the following rule:</p>
<p dir="auto">#3 Firewall Rule:</p>
<p dir="auto">Action: <strong>Pass</strong><br />
Interface: <strong>WAN2</strong><br />
Address Family: <strong>IPv4</strong><br />
Protocol: <strong>TCP</strong><br />
Source: <strong>any</strong><br />
Destination: <strong>Single host or alias -&gt; 193.42.21.183</strong><br />
Destination Port Range: <strong>from: HTTPS(443) to: HTTPS(443)</strong></p>
<p dir="auto">With this rule, I am able to get a webpage (pfsense login, thats not what I want, but here I can see that anything happened in the background).</p>
<p dir="auto">I am really frustrated wasting so much time without any solution. Did I have to uses outbound NAT or something? What is my problem? :(<br />
Thank you so much for reading this!</p>
]]></description><link>https://forum.netgate.com/topic/109999/port-forwarding-nat-routing-problem</link><generator>RSS for Node</generator><lastBuildDate>Wed, 16 Sep 2026 09:00:58 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/109999.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 09 Jan 2017 01:39:52 GMT</pubDate><ttl>60</ttl></channel></rss>