1:1 Nat / Multiple Public IP's



  • I have a Cable Modem with 6 external IP's (1 dynamic on subnet 255.255.248.0 and 5 on 255.255.255.0), I bound the dynamic to my WAN address, and Bound ONE of the static's to OP1. I configured a LAN interface for the Dynamic WAN address and I'm on the internet no problem. I configured OPt2 with another LAN address and then procedeed to setup 1:1. I can not get any traffic to pass to or from op1 to opt2. Any suggestions?



  • do you have on your OPT an IP out of your LAN range?
    do you bridge OPT to the LAN?
    if no: it wont work (you cannot have the same subnet twice on different interfaces)
    if yes: do you have firewall rules in place that allow traffic between the two interfaces?



  • do you have on your OPT an IP out of your LAN range?
    OPT1 (Connected to Switch on Cable modem)
    IP is 172.16.1.127 (fake IP)
    Subnet is 255.255.255.0
    OPT2 (LAN)
    IP is 10.10.1.1
    Subnet is 255.0.0.0

    do you bridge OPT to the LAN?
    No bridging in effect

    Basically my network looks like this
    NOTE: Pfsense machine has 4 network adapters, WAN, LAN, WAN2, LAN2

    Cablemodem –---- Switch --------WAN|PFSENSE|LAN ------ Internal Switch ---- Internal Private Network HERE
                              172.16.13.129 (fake)            192.168.1.1                            192.168.1.100 - 192.168.1.200 (DHCP)
                              255.255.248.0 Subnet            255.255.255.0 Subnet   
    Cablemodem ------ Switch ------- WAN2|PFSENSE|LAN2 --------- Internal Switch ---- External Email Server / Mysql Server
                              172.16.3.127 (fake)                10.10.1.1                                  10.10.1.100
                              255.255.255.0                        255.0.0.0



  • could you post your firewall rules?



  • LAN 
    Proto Source Port Destination Port Gateway Description

    • LAN net  *     *               * *         Default LAN -> any
      WAN
      Proto Source Port Destination Port Gateway Description
      *  RFC 1918 networks  *  *  *  *

    WAN2
    Proto  Source  Port  Destination  Port  Gateway  Description

    • WAN2 net *     *             * 172.16.3.1
      LAN2
      Proto  Source  Port  Destination  Port  Gateway  Description 
      *  LAN2 net  *      *        *  172.16.3.1


  • SOLVED, thanks.


Log in to reply