Help with Nat Forwarding

yaikun94 · January 6, 2017, 5:24am

My config is simple.
ISP>>>RB1100AHx2>>>NAS Server.

+++RB1100AHx2:
-ether1: wan (receive ip from isp)
-ether2-10: lan (ip 20.0.0.0/24)
+++NAS Server
-receive ip from RB1100Ahx2 (20.0.0.4)

I have configured port forwarding on RB1100AHx2 from ip wan to 20.0.0.4 and it worked well.
The problem is when i access to NAS server from outside, it show my ip using to access it is 20.0.0.1 (gateway of lan of RB1100AHx2), not the ip wan im using to access it (27.x.x.x). Is it possible to make NAS server showing my wan ip using to access it??
Thanks in advance and sorry for my bad english.

Sob · January 6, 2017, 5:24pm

Looks like too broad masquerade rule.

yaikun94 · January 9, 2017, 2:14am

Hi, sorry for the late replied.
could you be more specific pls.

aryutry112 · January 9, 2017, 5:08am

In addition to changing your console’s network settings, in order to get an Open or Type 1 NAT connection you will have to change your home network settings. Check out the guides on . com for information on changing your network’s NAT type. In order to get an Open/Type 1 or Moderate/Type 2 NAT type, you may also have to set up a Static IP Address on your console. Check out the portforward.com guides on how to do that for different consoles.

Sob · January 9, 2017, 11:13pm

If you don’t see original source address, it means that it was changed by NAT, in this case srcnat. So look at your srcnat rules and you’ll probably find something like:

/ip firewall nat
add action=masquerade chain=srcnat

Such rule would apply to all connections, both outgoing and incoming. So you could limit it to outgoing only by adding out-interface=ether1.

yaikun94 · January 10, 2017, 3:50am

Sob:

If you don’t see original source address, it means that it was changed by NAT, in this case srcnat. So look at your srcnat rules and you’ll probably find something like:
/ip firewall nat
add action=masquerade chain=srcnat
Such rule would apply to all connections, both outgoing and incoming. So you could limit it to outgoing only by adding out-interface=ether1.

Thanks, i’ll try it

yaikun94 · January 10, 2017, 4:30am

Sob:

If you don’t see original source address, it means that it was changed by NAT, in this case srcnat. So look at your srcnat rules and you’ll probably find something like:
/ip firewall nat
add action=masquerade chain=srcnat
Such rule would apply to all connections, both outgoing and incoming. So you could limit it to outgoing only by adding out-interface=ether1.

Hi,
I only have 2 srcnat rules but both of them use out-interface=bridge1(192.168.10.0/24) and bridge2(192.168.88.0/24). and my problem with ip 20.0.0.1 is on bridge3 which don’t have srcnat rule yet.

Sob · January 10, 2017, 4:25pm

Try to look again. Because something clearly changes the address. And from the description, it can hardly be anything else than your router. If you don’t see it, consider exporting and posting your config, someone else might have better luck.