NAT the same port for all gateways

costasppc

Hello,

I do not know how to set this correctly (may be it silly), but I need to have a port forwarded to an internal machine from all the available WANs.

Maybe it can be done by NATing the port to a WAN group, and if from outside they select the WAN1 or WAN2, then the NAT will occur from this WAN.

I am trying to make a "WAN failover" from outside networks.

Best regards

Kostas

Metu69salemi

Create host alias, with your public ip's
Create port forward rule with this alias as destination

But how the nat work with this, don't know

costasppc

Thank you.

But why destination? It is inbound NAT. I just need to make sure that if one of the WANs is down, the clients from outside the network can use the other to access a service inside the company (like ex. a web server).

They can use either: server1.company.com -> WAN IP of WAN1 -> inbound NAT port 80 to internal server
server2.company.com -> WAN IP of WAN2 -> inbound NAT port 80 to internal server

Best regards

Kostas

Metu69salemi

Destination because:
Source, from where you can connect and this rule is valid
Destination, what ip's you listen
Redirect: to where this trafic is sent

That's why i mentioned, that your public ip alias should be at destination.

costasppc

Thank you, I see the point.

Do I have to create outbound NAT rules for every inbound one?

Regards

Kostas

Metu69salemi

I think that pfsense knows where to send trafic, but test it. if only one ip is working in bothways then you need manual outbound nats

costasppc

Thank you very much for your help.

I have created a test rule based on instructions found in Docs, and it works OK, it just required a reboot of the Alix to work.

I will post back if any other problem occur.

Best

Kostas