OPNsense and nat

[darkbot956]

Seems theirs piles of diffent flavors of NAT out thier, what kind douse OPNsense use and is it possable to change types as needed to other types in the settings ?

[weust]

What do you mean with different NAT types?

[bartjsmit]

Yes; SNAT is done outbound, DNAT for published hosts and D/SNAT for 1:1 requirements. Also NPT for IPv6 but that's an edge case.

Bart...

[darkbot956]

Anyway to change what kind it uses as need in the settings someware ?

Exaple: if your trying to game and its Symmetric NAT your not gaming anymore cus nothing works.

[opnfwb]

You can get around Symmetric NAT by configuring static ports on the outbound NAT rule. You'll need to first switch to manual outbound NAT rule generation, then edit the rule for your LAN subnet and enable static ports. This will fix most of your gaming issues and in most cases will get you a "moderate" NAT without any port forwarding required.

If you want "open" NAT you'll have to combine the changes above with some manual port forwarding to your gaming clients.

I've attached a screenshot showing how to set static ports on outbound NAT in OPNsense. Hope this helps.