Page 1 of 1

srcnat rule not working

Posted: Sat Feb 13, 2016 12:25 pm
by sjoram
Hi all,

I have moved a device on my network from one VLAN with a /16 subnet onto another with a /30.

It was on 10.5.0.0/16 (VLAN10) and has moved to 192.168.5.0/30 (VLAN5)

RouterBOARD 750GL is 10.5.0.254 and 192.168.5.1 respectively.

Device of interest was 10.5.2.2 now 192.168.5.2

I have a srcnat rule for source 10.5.0.0/16 out interface ppp client to a public IP
I have created another srcnat for 192.168.5.0/30 in the same way as the previous but this one is not working - counters are showing no traffic matching that rule.

I have IPSec policy to allow 192.168.5.0/30 to be reached over tunnel from another RB750. That is working and I can see the device from the remote network.

Logging rule shows ICMP traffic from 192.168.5.0/30 trying to reach 8.8.8.8 from its private IP which obviously isn't going to work.

Cannot see any rules higher in the filter or NAT chains that would be causing an issue here.

Any suggestions?