SNAT & Double NAT scenario

Follow

Lewis Colascione

• December 10, 2020 13:59

Hi, I have  Gold unit in router mode, and its connected to the LAN side of my FIOS G1100. Everything is working great, but I wanted to disable the SNAT on the Gold so the router would see the actual source addresses of my LAN clients.

This is the config -    (LAN)-----[FW Gold]-----<FIOS G1100>-----((Internet))

Given that the G1100 is performing NAT by default, I assumed I could disable the SNAT on the Gold. When I disable the SNAT, then I lose all traffic flow to the internet. From a routing, and NAT perspective this makes no sense to me as the G1100 should just be the next hop route for the Gold, and it will NAT all private addresses. Curious if you could share your thoughts on this one.

Other then that the Gold is Aces.

lew

0

• 

  Firewalla

  • December 10, 2020 17:05

  I am assuming you have two different networks, one on FiOS and one on FWG

  The problem is likely the FiOS G1100 is missing routes of your local network.   Meaning, it doesn't know where to send the traffic coming back.   So you need to add a static route some where on G1100

  0

  Comment actions Permalink
• 

  Lewis Colascione

  • December 10, 2020 18:26

  Yes, wow, that is embarrassing.

  I should have known better, been in sales too long. Its always the routing.

  Thanks, that was it.

  0

  Comment actions Permalink

Please sign in to leave a comment.