Nat forward on Bond interface.

Hi,

I have a strange problem.

I have a CCR 1016 router.
I have 1 provider but with 2 physical fiber connection. On ether1 I have 1 link and in ether2 second link. Both link is connected on internet provider in same switch to the provider.


I create one Bond interface with ether1 and ether2. The internet works fine and from LAN to INTERNET.
Problem is at NAT with port forwarding. I create a rule like IP_WAN_BOND:88->IP_LAN:80. This rule not working.
If I disable BOND interface that rule works without problem.

Can somebody help me ?



Best Regrads,

Check the firewall filter rule allowing natted traffic.

What kind of rules ? I have One interface Bond1 and one ether3 on LAN like this:

Bond1 85.186.5.3/24
Gateway 85.186.5.1

Ether1 192.168.0.1/24

Regards

If you set port forwarding rule in nat, you need to allow that traffic in filter if you use general drop rule. Hard to guess what is set in your router…

In firewall I don’t have any rules in filter. Now I test and I have just 2 rules in NAT. One rule for masquerade and one rule for port forwarding.

I don’t understand why need in a filter rule ? If I disable IP from Bond1 and I put IP on ether1 or ether2 the port forwarding works fine.

Regards.

You need filter rules to secure your router and network.

Hi,

My question was for my port forwarding problem.
Course we need a firewall but I want to resolve port forwarding on Bond interface.

soo… Please can help me with that problem ?

Too few info. Outbound traffic works normally? Check the routes…

My outgoing traffic work fine.

My config is:

WAN1 and WAN2 have same network and same gateway outgoing traffic work fine and PORT FORWARDING work fine
WAN1 86.5.5.2 gw 86.5.5.1
WAN2 86.5.5.3 gw 86.5.5.1
In this scenario port forwarding work fine

If I put in bond I use WAN1 and WAN2 in bond Outgoing traffic work fine but port forwarding NOT work
BOND1 86.5.5.2 gw 86.5.5.1


Regards,

Try setting rule with interface like bond:88->ip_lan:80