OPNsense Forum

Archive => 18.7 Legacy Series => Topic started by: DanMc85 on August 08, 2018, 09:43:41 pm

Title: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: DanMc85 on August 08, 2018, 09:43:41 pm

I know OPNSense supports using 1:1 NAT from an external WAN IP to an internal LAN IP.

However, does it support doing this with a DHCP WAN IP Address?
This WAN IP Address will be updated using a DynamicDNS Service - this not worried about it being DHCP vs Static.

If this is possible, what configuration steps are needed to accomplish this?

Thanks!
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: marjohn56 on August 09, 2018, 09:29:04 am
1:1 is really for use if you have multiple WAN IPs. If  you only have one WAN IP then all WAN incoming traffic would be mapped to a specific internal IP, is that what you want?
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: DanMc85 on August 09, 2018, 01:06:49 pm
1:1 is really for use if you have multiple WAN IPs. If  you only have one WAN IP then all WAN incoming traffic would be mapped to a specific internal IP, is that what you want?

I have TWO WAN IPs, just they are both DHCP.  I want to use one of them in a 1:1 setting.
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: marjohn56 on August 09, 2018, 01:13:24 pm
Yes, that will work.
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: DanMc85 on August 09, 2018, 01:16:39 pm
Yes, that will work.

Yes, but do you happen to know the steps involved to assign a DHCP WAN address to a 1:1 NAT?  Last time I tried (on an older build of opnsense), I only saw options for manual entry of a static address.

Dan
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: marjohn56 on August 09, 2018, 05:11:14 pm
I see what you mean, you cannot enter WAN address there, only a static.


Hmm, see no reason why we cannot alter that a little to allow the selected WAN address, might need to make it an alias.


I'll look into it and see if it can be done.
Title: Re: 1:1 NAT using a WAN w/DHCP (Not Static)
Post by: DanMc85 on August 12, 2018, 06:41:05 am
I see what you mean, you cannot enter WAN address there, only a static.


Hmm, see no reason why we cannot alter that a little to allow the selected WAN address, might need to make it an alias.


I'll look into it and see if it can be done.
Thank you :)

Sent from my SM-N950U using Tapatalk