1:1 NAT using a WAN w/DHCP (Not Static)

Started by DanMc85, August 08, 2018, 09:43:41 PM

Previous topic - Next topic

I know OPNSense supports using 1:1 NAT from an external WAN IP to an internal LAN IP.

However, does it support doing this with a DHCP WAN IP Address?
This WAN IP Address will be updated using a DynamicDNS Service - this not worried about it being DHCP vs Static.

If this is possible, what configuration steps are needed to accomplish this?

Thanks!

1:1 is really for use if you have multiple WAN IPs. If  you only have one WAN IP then all WAN incoming traffic would be mapped to a specific internal IP, is that what you want?
OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member

Quote from: marjohn56 on August 09, 2018, 09:29:04 AM
1:1 is really for use if you have multiple WAN IPs. If  you only have one WAN IP then all WAN incoming traffic would be mapped to a specific internal IP, is that what you want?

I have TWO WAN IPs, just they are both DHCP.  I want to use one of them in a 1:1 setting.

Yes, that will work.
OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member

Quote from: marjohn56 on August 09, 2018, 01:13:24 PM
Yes, that will work.

Yes, but do you happen to know the steps involved to assign a DHCP WAN address to a 1:1 NAT?  Last time I tried (on an older build of opnsense), I only saw options for manual entry of a static address.

Dan

I see what you mean, you cannot enter WAN address there, only a static.


Hmm, see no reason why we cannot alter that a little to allow the selected WAN address, might need to make it an alias.


I'll look into it and see if it can be done.
OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member

Quote from: marjohn56 on August 09, 2018, 05:11:14 PM
I see what you mean, you cannot enter WAN address there, only a static.


Hmm, see no reason why we cannot alter that a little to allow the selected WAN address, might need to make it an alias.


I'll look into it and see if it can be done.
Thank you :)

Sent from my SM-N950U using Tapatalk