Non routable peering address
-
I have a pfsense configured such that the WAN address is non routable (private peering network), and addresses on other interfaces are routable.
This generally works fine, devices behind it (with routable ips) have full working connectivity and i can connect to the routable ip address which is assigned to the pfsense box. What does cause a problem however is when the firewall itself needs to make an outbound connection (eg to download packages or updates), pfsense uses the non routable address as the source address for making connections. Is there any way to force it to use the routable address as the source address instead?
-
Manual outbound NAT, set a NAT rule to map the private WAN IP to one of the firewall's public IPs on another interface.
-
How about for ipv6?
-
Use NPt to map the non-routable segment to the routed segment.
