Netduma Router behind Netgate Sg-2100 - gaming only

[NickH 0]

Hi there

I have a netduma R2 router that i only want my consoles to go through. This is pretty much for the geo filtering that it offers etc. Ive done the config and im nearly there but not quite.
I created a distinct port on the netgate (Lan 4) as per the netgate guide, gave it a ip address of 192.168.88.1/24 and plugged the Netduma WAN port into this. The netduma WAN ip is 192.168.88.2.
(note: i have to use the WAN port on the netduma or their fucntions like geo filtering dont work according to netduma)
Local subnet of the netduma device and any attached devices is 192.168.77.0/24

I plug the xbox into the netduma, can get internet connectivity just fine but Im having issues with Double NAT which i expected - now the way round it, as advised by Netduma, is to put the WAN Ip address of the Netduma into the "DMZ" of the Netgate. When they say DMZ they mean the traditional home style routers that have a "DMZ"option.

I have tried a 1:1 nat from the wan address to the netduma wan ip to create this "DMZ" option but no good. I have even tried setting outnound nat to manual and for the netduma entry select "No NAT"

Slowly losing my hair with this and i know i will get questions as to why but would like some guidance on how i can make this work if possible?

thanks in advance

[stephenw10]

1:1 NAT and the appropriate firewall rule(s) to match is the best you can do there unless you have a routed subnet you can use.
You need outbound NAT but the 1:1 rule will provide that and give you static source ports.

Steve

[NickH 0]

@stephenw10 Figured out the issue! NAT 1:1 is indeed correct but i forgot to put the firewall rules in need inbound from WAN!