Products Firewalla Gold SE Firewalla Gold Pro Firewalla Gold Plus Firewalla Purple Firewalla Purple SE Firewalla Wi-Fi SD Product Comparison Product Reviews

Multi-IP WAN and Port Forwarding

Planned
Follow
Avatar
Greg Parsons

I have multiple static WAN IPs assigned by my ISP (e.g., x.x.x.1 thru x.x.x.50).  I have 2 mail servers (each housing a different domain's MX) on the internal LAN.  The public DNS addresses of each mail server are x.x.x.20 and x.x.x.21.

Using the Firewalla Gold in router mode, how do I create port-forwarding rule on the WAN interface where x.x.x.20:25 goes to one server (e.g., MX for domain_a.com on LAN IP y.y.y.100:25) and x.x.x.21:25 goes to another (e.g., MX for domain_b.com on LAN IP y.y.y.101:25)?  

It seems that port-forwarding is limited to the primary interface -- or at least a single interface -- on the WAN (in this case call it x.x.x.1) and there's no ability to specify the WAN source IP for the forwarding rule.

 

5

Comments

23 comments

Sort by Date Votes
  • Avatar
    Firewalla

    Are you using NAT on the main interface? 

    We do not yet support Multiple IP's on the same WAN interface.

    0
    Comment actions Permalink
  • Avatar
    Greg Parsons

    Yes, I’m using NAT to translate public to private, but to your 2nd point, doesn’t seem that I can use the Gold as a router until multi-IP on the WAN is supported. Any idea whether this is in the roadmap? I struggle to believe I’m the only one in this position.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    You are the second person :). We are still evaluating on how to support this.  The previous person's usage is a bit different than yours.  (but fundamentally it is still multiple IP mapped to the same interface)

    0
    Comment actions Permalink
  • Avatar
    Greg Parsons

    Thanks.  Was simply surprised, as every SOHO router I've ever had was able to do so with ease -- both multi-IP on WAN and then specifying source-IP for port-forward.

    1
    Comment actions Permalink
  • Avatar
    Justin Ferrari

    We would also love to see this feature.

    1
    Comment actions Permalink
  • Avatar
    Travis Best

    I would also need this feature 

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    it is now planned.

    2
    Comment actions Permalink
  • Avatar
    Tony

    This is kinda disappointing, a cheap $50 router from amazon with DD-WRT supports this!

    -1
    Comment actions Permalink
  • Avatar
    Firewalla

    @tony, the feature is coming 1.973. 

    0
    Comment actions Permalink
  • Avatar
    Justin Arendt

    Just going through the recent 1.973 release notes and do not note this feature as being included.  Hopeful that it is still in the roadmap, as I have the same situation as OP.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    1.973 has it, just the app is not yet supporting this feature. At moment, I can't really commit if it is 1.48 or 1.49 will have it.

    1
    Comment actions Permalink
  • Avatar
    AJ Tatum

    So, I'm confused, I can't specify a particular device or group of devices to use a different IP address as I have multiple dedicated IP addresses; it seems like this is what I'm looking for, but I'm not sure... And, if it is, it sounds like it's kind of implemented but not on the app? When will this feature be fully rolled out?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    see the last section of this https://help.firewalla.com/hc/en-us/articles/360046703673-Firewalla-Feature-Guide-Network-Manager 

    This is the multiple IP support

    0
    Comment actions Permalink
  • Avatar
    AJ Tatum

    Perhaps... It looks like my router (access point/bridge) has to support VLAN tagging, which unfortunately it doesn't (Asus RT-AX88U & Asus RT-AX89X). So, do I need something like the below between the Firewalla (in router mode) and my existing equipment? Like the switch below?

    NETGEAR 5-Port Gigabit Ethernet Plus Switch (GS105Ev2) - Managed, Desktop or Wall Mount, and Limited Lifetime Protection https://www.amazon.com/dp/B00HGLVZLY/ref=cm_sw_r_apan_i_0MCEZND73DTKXMQ4R26R

    Sorry, this is somewhat new terrain for me, so any guidance would be appreciated!

    0
    Comment actions Permalink
  • Avatar
    robert

    I have a Firewalla gold with 3 LANs and 1 WAN physical ports assigned.

    How do I bind more than one public IP to a single WAN port? Is this possible? Basically, I need to have 3 Public IP addresses assigned to the single WAN port and routed to each (3) LAN ports.

    Thank you

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    see https://help.firewalla.com/hc/en-us/articles/360046703673-Firewalla-Feature-Guide-Network-Manager

    there is a section on multiple IP

    0
    Comment actions Permalink
  • Avatar
    robert
    • Edited

    Thank you so much. I have successfully assined the public IP numbers to WAN port. Now I need to assign each LAN port to a different public IP on WAN port Could you please guide me?

    I have public WAN IP numbers 1, 2, 3, on physical WAN port:

    I want isolated LAN 1  port to go out to internet using WAN IP 1
                             LAN 2 port to go out to internet using WAN IP 2
                             LAN 3 port to go out to internet using WAN IP 3

     

     

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    The multiple WAN is primarily for ingress traffic. Supporting mapping of LAN to WAN for egress will likely happen later.

    1
    Comment actions Permalink
  • Avatar
    robert
    • Edited

    Thank you so much! So the option currently is not available then.

    Would be really nice to bind each LAN to a different WAN public IPs.

    0
    Comment actions Permalink
  • Avatar
    Ronalaus

    Not just be able to bind to different ports, but internal IPs/Devices as well. I would love to be able to route all traffic on a device (mail server for example) out of a specific WAN IP (Destination NAT)

     

    1
    Comment actions Permalink
  • Avatar
    David Peck

    I am also very interested in doing this. Any updates on this Firewalla team?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    See https://www.youtube.com/watch?v=mldM5x__hBg&t=70s

     

    0
    Comment actions Permalink
  • Avatar
    David Peck
    • Edited

    I see that you need to create the source NAT for outbound traffic, but what about inbound traffic? Is there a way to set inbound traffic on a specific external IP to route to an internal IP without having to use port forwarding? Especially for some services requiring UPNP. UPNP appears to map only to the main wan interface IP address instead of the IP set by source NAT.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post