1
General Discussion / Re: WAN with private IP space, LAN with public...
« on: May 22, 2021, 08:01:20 pm »
Tried that and it didn't work. I still have no idea how to solve this one.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
General Discussion / WAN with private IP space, LAN with public...
« on: May 13, 2021, 12:13:39 pm »
First post 
I have ran into a situation where the carrier at a site gave me a private /30 for the WAN side of the router and public /29 for the LAN side. Was planning to use OpnSense only as a non NAT router and firewall so I thought 'no big deal.' Everything is setup and working fine from a router and firewall perspective. However, any traffic not originating from one of the public addressees will not route past the provider's edge.
Example:
WAN=
10.68.0.220/30
.221 gateway
.222 WAN interface address
LAN
50.21.0.48/29
.49 LAN interface address
.50 - 54 -Assigned to NAT routers/gateways feeding various subnets and services
Opt1
192.168.1.0/24
Used for management only. I have management blocked on both the LAN and WAN interfaces.
The primary issue I have is this, OpnSense itself and the underlying operating system cannot access the internet across the WAN connection. This means no automatic firmware checks and no ability to use plugins such as auto updating geolocation filtering.
Any way to work around this?
I have ran into a situation where the carrier at a site gave me a private /30 for the WAN side of the router and public /29 for the LAN side. Was planning to use OpnSense only as a non NAT router and firewall so I thought 'no big deal.' Everything is setup and working fine from a router and firewall perspective. However, any traffic not originating from one of the public addressees will not route past the provider's edge.
Example:
WAN=
10.68.0.220/30
.221 gateway
.222 WAN interface address
LAN
50.21.0.48/29
.49 LAN interface address
.50 - 54 -Assigned to NAT routers/gateways feeding various subnets and services
Opt1
192.168.1.0/24
Used for management only. I have management blocked on both the LAN and WAN interfaces.
The primary issue I have is this, OpnSense itself and the underlying operating system cannot access the internet across the WAN connection. This means no automatic firmware checks and no ability to use plugins such as auto updating geolocation filtering.
Any way to work around this?
Pages: [1]