automatic nat rules not being created for public static wan ip

Started by Layla, July 07, 2023, 07:49:29 AM

Previous topic - Next topic
automatic nat rules not being created for public static wan ip

found this topic:
https://forum.opnsense.org/index.php?topic=16835.msg76606#msg76606

still relevant.   But found it all over the internet once I realized what to search for.

brand new DEC740,

Type    opnsense    
Version    23.1.11    
Architecture    amd64    
Commit    f1305748e    
Mirror    https://pkg.opnsense.org/FreeBSD:13:amd64/23.1    
Repositories    OPNsense    
Updated on    Wed Jul 5 23:42:46 CDT 2023    
Checked on    N/A

took me quite some time to figure out.   Worked fine in testing, went to swap in live and the entire resort went down. 

Turns out the resorts static WAN ip does not generate the automatic outbound NAT rules like the dhcp WAN does.


I also did not just know how to add the outbound NAT rules, so this took quite a while a bit for me to fix.


if you end up finding this post on forum search, here is what I did:
Hybrid outbound NAT rule generation

then:

Interface    Source    Source Port    Destination    Destination Port    NAT Address    NAT Port    Static Port
WAN2    ! WAN2 net    *    *    *    WAN2 address    *    NO         
WAN2    ! WAN2 net    *    *    500    WAN2 address    *    YES


Good luck,
Layla