Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OPT Interfaceno ping to external ip

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    5 Posts 2 Posters 842 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      digitalcomposer
      last edited by

      Hi

      I created new vlan 99 and assigned to interface "opt", the firewall rule for interface "opt" is any any any allow. When i try to ping 8.8.8.8 with source interface "ssp" there is no response. Packetcapture is empty.

      Thanks

      D 1 Reply Last reply Reply Quote 0
      • D
        digitalcomposer @digitalcomposer
        last edited by digitalcomposer

        @digitalcomposer

        Sloved Uotband NAT was on manual :)

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @digitalcomposer
          last edited by

          @digitalcomposer said in OPT Interfaceno ping to external ip:

          NAT was on manual :)

          Why would be the question.. Following some stupid vpn guide that says to do that for some stupid reason. There is no reason to switch to manual outbound nat to use a vpn connection.

          While there are some specific use cases where you would want to use manual outbound nat, some guide that says how to connect to a vpn service is not one of these ;)

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          D 1 Reply Last reply Reply Quote 0
          • D
            digitalcomposer @johnpoz
            last edited by

            @johnpoz

            I switched to manual because of WireGuard site to site tunnel. The main site was seeing the packet coming from tunnel ip.

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @digitalcomposer
              last edited by

              @digitalcomposer simple hybrid nat, create the rule and then check the do not nat checkbox.. ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.