How to unable NAT for outsider IP



  • Hello, I have a questıon,

    I wanna set my settings such that  when outsider user wants so connect to my ınner network built wıth pfsense I want it to use its own IP that it got with DHCP from the  beginning, so basically what ı want ıs when a new connectıon establıshed ı dont want nat to reunıte ıt and change ıts ıp agaın, how can ı  do thıs?


  • Banned

    EHUH. Sorry, try again.



  • I think you're going to have to try and explain what you're trying to do/solve a little more clearly.

    I wanna set my settings such that  when outsider user wants so connect to my ınner network built wıth pfsense

    Are you talking about someone connecting to your LAN Nic via the WAN Nic?
    That's going to happen via a Port Forward or some VPN connection.

    I want it to use its own IP that it got with DHCP from the  beginning

    There's three different "it"'s in that statement and any of them they could refer to LAN/WAN/VPN or something else, please explain more clearly what you're trying to accomplish.

    An example using your current WAN/LAN/VPN subnets would probably help.



  • Oh right, so its like this

    There re lots of computers in our company and u know when we connect to internet inside to company, DHCP gives IP to our machınes, so at the some part of the company we  decided to use pf sense.At this point when some other ocmputer connected to pf sense, I want them to take their ips directly from the dhcp server,not from the nat, so basically it will be like this, for example if i want to connect internet with some computer here DHCP would give me 193.168.140.130, and if i connect that pc behınd the pf sense, ı want it again have the same ip, instead of having a new ip through pf sense'S nat.


  • Banned

    If what you actually mean that you want the hosts on some local pfSense interface (like, DMZ) get public IPs, then there's a whole slew of information missing, starting with the network diagram and public IP ranges available to you. (For any reasonably working configuration, you need /30 for pfSense WAN and a larger subnet for that interface - such as DMZ - routed to you.)



  • sorry for my english but i didnt quıte understand what ı have to do now?


  • Banned

    Considering the configuration is non-trivial, perhaps it'd be better to post in your native language on the internation forums: https://forum.pfsense.org/index.php#c3

    Or, if it's a company network, perhaps get paid support from ESF? https://www.pfsense.org/get-support/