Port forwarding
-
Hallo Guys
I am new to pfSense, I have been using Untangle before, but it functions a bit differently in gateway mode at least.
I have 2 mobile broadband routers, that I would like to connect to my pfSense box, and use load balancing on them. They are on two different local nets, one 192.168.8.xxx and the other one is on 192.168.100.xxx.
Currently, I have one connected, and my pfSense box is also DHCP for all my devices behind the box.
So, one of the broadband connections has a static WAN IP. I want to use that for VPN on my synology NAS, which has open VPN support.
Currently, I just have the correct port forwarded from the mobile broadband router to the LAN IP of the Synology, since my Untange box and the Synology at the broadband router is on the same LAN (192.168.100.xxx net), so no problem, but if I use the pfSense box, which has its own LAN (i.e. 192.168.1.xxx), how should I set it up then? Should I first forward the port from the mobile broadband router to pfSense, and the forward it further on to the Synology?
Thanks.
/Ulf
-
@ulflaursen said in Port forwarding:
Should I first forward the port from the mobile broadband router to pfSense, and the forward it further on to the Synology?
Exactly this. You have to put the Synology into the LAN behind pfSense and reconfigure its IP. Then forward the traffic to pfSense WAN and again on pfSense to the Synology.
Consider that pfSense does not allow access from private networks on WAN by default. So if your broadband router does masquerading on incoming forwarded traffic it might be blocked. You can enable access from private addresses in the WAN interface settings by removing the check at "Block private networks".
-
@viragomann said in Port forwarding:
@ulflaursen said in Port forwarding:
Should I first forward the port from the mobile broadband router to pfSense, and the forward it further on to the Synology?
Exactly this. You have to put the Synology into the LAN behind pfSense and reconfigure its IP. Then forward the traffic to pfSense WAN and again on pfSense to the Synology.
Consider that pfSense does not allow access from private networks on WAN by default. So if your broadband router does masquerading on incoming forwarded traffic it might be blocked. You can enable access from private addresses in the WAN interface settings by removing the check at "Block private networks".
Thanks a lot man :-)
/Ulf