Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ICMP Issues I Think

    NAT
    3
    6
    2.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JeffManross
      last edited by

      We have 2 locations each has 5 External addresses and we NAT
      each External Ipaddress and port to internal Ipaddresses and ports for specific things.

      We also run Nagios Network Monitoring at both locations.
      One of the Nagios TEST is to PING each server to check if it is "OK"
      and to getting workload and other information from each computer.

      My question is how can I enable PING to each machine specifically?
      Nagios workload and other information is passed through port 12489
      this is easy to map to each machine but I can not get external pings to internal IP's.
      Internal ping to internal IP's works fine.

      Any help or direction would be most appreciated.

      Thanks
      Jeff

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        You're asking if you can ping from outside NAT to multiple machines inside?  Not possible.

        I'd suggest that you look to using some form of VPN as a cleaner solution to your problem.

        1 Reply Last reply Reply Quote 0
        • J
          JeffManross
          last edited by

          If I turn on ICMP for any inside and outside
          I get PING replys from my first External IP address but not the others.

          Any suggestions

          1 Reply Last reply Reply Quote 0
          • Cry HavokC
            Cry Havok
            last edited by

            That's down to the device with the External IP address.  Have you configured it to reply to ping requests (ICMP Echo Request)?  Does the behaviour change if you ping directly from the pfSense host itself?

            Is the "External IP address" on the pfSense host, or are they on remote hosts?

            1 Reply Last reply Reply Quote 0
            • J
              JeffManross
              last edited by

              I have all my machines on the inside with a NAT address 10.10.10.??
              and all the outside IPs are 204.??.??.93-97
              WAN  TCP  22 (SSH)  10.10.10.249             (ext.: 204.??.??.93)  22 (SSH)  Nagios SSH Server   
              WAN  TCP  82  10.10.10.1             (ext.: 204.??.??.93)  82  ROUTER   
              WAN  TCP  25 (SMTP)  10.10.10.98             (ext.: 204.??.??.94)  25 (SMTP)  SERVER1 SMTP   
              WAN  TCP  25 (SMTP)  10.10.10.98             (ext.: 204.??.??.95)  25 (SMTP)  SERVER2 SMTP   
              WAN  TCP  25 (SMTP)  10.10.10.98             (ext.: 204.??.??.96)  25 (SMTP)  SERVER3 SMTP   
              WAN  TCP  3389 (MS RDP)  10.10.10.99 (ext.: 204.??.??.95)  3389 (MS RDP)  SERVER2 RDP   
              WAN  TCP  80 (HTTP)  10.10.10.99                (ext.: 204.??.??.96)  80 (HTTP)  SERVER3 HTTP   
              WAN  TCP  443 (HTTPS)  10.10.10.99              (ext.: 204.??.??.96)  443 (HTTPS)  SERVER3 HTTPS   
              WAN  TCP  81  10.10.10.99                          (ext.: 204.??.??.94)  81
              WAN  TCP  80 (HTTP)  10.10.10.100             (ext.: 204.??.??.95)  80 (HTTP)  SERVER2 HTTP   
              WAN  TCP  443 (HTTPS)  10.10.10.100            (ext.: 204.??.??.95)  443 (HTTPS)  SERVER2 HTTPS   
              WAN  TCP  80 (HTTP)  10.10.10.101             (ext.: 204.??.??.94)  80 (HTTP)  SERVER1 HTTP   
              WAN  TCP  443 (HTTPS)  10.10.10.101            (ext.: 204.??.??.94)  443 (HTTPS)  SERVER1 HTTPS   
              WAN  TCP  3389 (MS RDP)  10.10.10.101        (ext.: 204.??.??.94)  3389 (MS RDP)  SERVER1 RDP

              I want to be able to ping each inside machine seperatly.

              Thanks
              Jeff

              1 Reply Last reply Reply Quote 0
              • C
                cmb
                last edited by

                You can only do that with ICMP and NAT when using 1:1.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post