Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VALID NAT POOL

    Scheduled Pinned Locked Moved NAT
    4 Posts 3 Posters 685 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      turk182
      last edited by

      Hi,

      Can you use the network address and broadcast address of your public IP Bloc as part of the NAT Pool ?

      example given the public subnet xx.xxx.196.0 /30

      can you use the following as the Address Pool for NAT ?

      xx.xxx.196.0 ( network )
      xx.xxx.196.1
      xx.xxx.196.2
      xx.xxx.196.3 ( broadcast )

      Thanks!

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott
        last edited by

        Try it and see what happens.  However, I don't think you want to do that, even if it is possible.  Those addresses are not supposed to be assigned to devices.  Why would you even want to?
        BTW, I just took a look and those addresses are excluded from the available range.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          It entirely depends on the context.

          If you use that subnet on an interface directly, then no, those cannot be used.

          If your ISP has routed a subnet to you and you do not have it defined on an interface nor have any CARP or alias VIPs defined, you can use the entire subnet including the network and broadcast addresses for NAT.

          So for example:

          This will NOT work using the network or broadcast:

          x.x.x.0/30 - network
          x.x.x.1 - ISP
          x.x.x.2 - You
          x.x.x.3 - Broadcast

          This will work:

          The above on WAN, plus y.y.y.0/30 routed to x.x.x.2, then set y.y.y.0/30 as an outbound NAT subnet

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • T
            turk182
            last edited by

            Thanks for the responses!

            Will be trying out the following as suggested by jimp:

            The above on WAN, plus y.y.y.0/30 routed to x.x.x.2, then set y.y.y.0/30 as an outbound NAT subnet"

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.