Ping/Access from NAT'ed ISP Client

Dredex · Jul 3, 2021, 7:47 AM

Hi, I have 2 WAN connections, one with PPPOE and one with Static IP.
Sometimes clients from PPPOE and from the same ISP can't ping/access my router, if I reboot pfSense the clients can ping/access my router.
From the ISP I found out that all clients that can't ping/access are from IP's that are NAT'ed but idk why if I restart my pfSense it starts to work again.
My clients are all home users with dynamic IP's, if they restart the router and get an IP from a different subnet they can ping/access my router, if they get an IP from the same subnet its not working.
At this moment I really don't know where is the problem. The only thing that I think its happening is that my ISP has recently NAT'ed some IP's and my pfSense router is not knowing about this.

pfSense 2.5.0-RELEASE

stephenw10 · Jul 3, 2021, 8:41 PM

That sounds like the ISP is blocking the traffic. It would not be unusual for an ISP to block connections between clients in the same subnet, particularly if they are NATing from some private space.
I assume you also get a new IP on the PPPoE WAN if you reconnect/reboot?

Steve

Dredex · Jul 4, 2021, 4:28 AM

My PPPOE connection has static IP, forgot to mention.