Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    1:1 NAT Issues

    NAT
    2
    6
    1730
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mskenderian last edited by

      Ok WAN IP: 24.X.X.226 / 29
      Gateway NONE, i ahve tried 24.x.x.225

      everything work fine

      so my usable range is 226-230

      i got to 1:1 NAT. Add entry…..
      External subnet IP = 24.x.x.230
      Internal IP: 10.20.30.100

      everything else default.

      This works fine. NO Virtual IP's no Firewall rules.
      I also tried the External subnet IP 24.x.x.228 and 24.x.x.229.

      all is fine.

      But if i change it to 24.x.x.227

      my comp (10.20.30.100) loses internet connectivity.

      What Is Going on?

      Iam i setting this up correctly, Why does it work on IP 24.x.x.228-230 but not 227?

      I also have another single IP address, which i tried 1:1 NAT, it works fine.

      1 Reply Last reply Reply Quote 0
      • M
        mskenderian last edited by

        anyone?

        1 Reply Last reply Reply Quote 0
        • johnpoz
          johnpoz LAYER 8 Global Moderator last edited by

          Well if they are using /30 vs /29

          .227 would be the broadcast on /30 from the .224/30 your on.

          so .225 is the gateway your using?  This seems a bit ambiguous "Gateway NONE, i ahve tried 24.x.x.225"  How would it work if you did not have a gateway set??  So clearly that statement of NONE as a gateway can not be correct.

          So if there is a network mismatch where your using /29 and the gateway has /30 you could work until you get to .227 which would be the broadcast address of your current /30

          You say 228 and 229 work which would be the next /30?????  But .228 is the wire on that /30??  Hmmm – also possible someone else is just stepping on .227?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

          1 Reply Last reply Reply Quote 0
          • M
            mskenderian last edited by

            well i said if i change gateway to none, it works for some reason. but here is the screenshot with it selected as it should be.

            [EDIT]

            SO 228 229 230 also work. but 227 does not work. for some reason.

            its a small test network, so there is no one else one it, except for my PE2950, my build freenas box, this pfsense box, and one PC


            1 Reply Last reply Reply Quote 0
            • johnpoz
              johnpoz LAYER 8 Global Moderator last edited by

              So your internal to some lab?  The only way it would work with no gateway set off the top of my head would be proxy arp
              http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094adb.shtml

              If your sure your masks are setup correctly on both the gateway pfsense is connecting too, etc..  I would think something is stepping on it.  Or something wrong on the device your natting too.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              2440 2.4.5p1 | 2x 3100 2.4.4p3 | 2x 3100 22.01 | 4860 22.05

              1 Reply Last reply Reply Quote 0
              • M
                mskenderian last edited by

                I have two sets of IP, first one is just one pack of static and the second of is 5 pack of static.

                SO i set up using only my one pack.  my WAN IP as X.X.32.58 / 30 with gateway of X.X.32.57. works fine.

                i went to VIP, sent up IP Alias X.X.222.226 /29

                now when i setup NAT1:1 everything works fine. i can set up IP ranges from 226-230…...

                Now going back to my original problem.

                for the the single IP the X.X.32.58. I changed the WAN to X.X.222.226 /29 with a gateway of X.X.222.225, works fine, I DELETE VIP. i got to 1:1 NAT setup X.X.225.228, works fine, X.X.225.229 works fine, X.X.225.230 works fine. but still when i do X.X.225.227, my computer loses access to the internet. local works,

                This is the problem i am having. why am i losing one STATIC IP?

                More INFO.

                Changed the WAN IP to  X.X.222.230 /29 with a gateway of X.X.222.225, now when i setup 1:1 NAT  X.X.225.226, X.X.225.227, X.X.225.229,  everything works fine...

                Does anyone think this is a BUG, when i setup WAN to be the first IP of the pack 226, i lose 227, but 228, 229,230 works. if i setup WAN to be 230, i can use 226,227,228,229. basically everything.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post