Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
samqixin

Loopback an upper router's WAN IP?

Recommended Posts

Posted · Original PosterOP

So here is the problem, my lab's global IP address is not signed directly to us.

Every time I want to access the local NAS via the WAN IP(you know why), the packet need to go to the upper NAT and come back.

 

Here is the simple topology:

******************

a.a.a.a (office router) b.b.b.b === b.b.b.2 (THE upper NAT) c.c.c.c === the world

******************

I have no idea how our ISP configures b.b.b.2 and c.c.c.c, I guess DMZ to our b.b.b.b?

 

HOW can I loopback c.c.c.c within our office router? 

I'm using pfsense as the router OS.

Link to post
Share on other sites
Posted · Original PosterOP
1 hour ago, mynameisjuan said:

Its called haripinning and needs to be configured on the device handling NAT. 

 

I appears you do not have control of that device?

I do not have control to the upper level NAT device. But I do control the office LAN, which means the local NAT device.(pfsense)

I understand that routers loopback its WAN IP by default. But here I want to loopback the upper level NAT's WAN IP in the local NAT.

Link to post
Share on other sites
9 hours ago, samqixin said:

I do not have control to the upper level NAT device. But I do control the office LAN, which means the local NAT device.(pfsense)

I understand that routers loopback its WAN IP by default. But here I want to loopback the upper level NAT's WAN IP in the local NAT.

It is not enabled by default on a majority of platforms. No clue about pfsense.

 

Again, nothing you can do unless you have access to the upstream device

Link to post
Share on other sites

You won't need access to the upstream device. You'd simply create a destination NAT rule, if pfSense sees traffic going to c.c.c.c then translate to nas ip address. This method is still considered as hairpinning or Nat loopback, depending on the vendor or whatever you want to call it :)

 

Create a Nat rule and set the interface to your inside/lan interface, fill out source and destination networks and then use the redirect target ip for the NAS internal ip address. 


I'm going to put a link to my PC specs which actually aren't my PC specs and I cry myself to sleep everyday so I can have these PC specs but I can't afford these PC specs so PC specs PC specs PC specs PC specs PC specs PC specs.

Link to post
Share on other sites
8 hours ago, BSpendlove said:

 

You won't need access to the upstream device. You'd simply create a destination NAT rule, if pfSense sees traffic going to c.c.c.c then translate to nas ip address. This method is still considered as hairpinning or Nat loopback, depending on the vendor or whatever you want to call it :)

 

 

If all he’s trying to do is really reach the nas, why even nat. Just go to the private IP

Link to post
Share on other sites
Posted · Original PosterOP
8 hours ago, BSpendlove said:

You won't need access to the upstream device. You'd simply create a destination NAT rule, if pfSense sees traffic going to c.c.c.c then translate to nas ip address. This method is still considered as hairpinning or Nat loopback, depending on the vendor or whatever you want to call it :)

 

Create a Nat rule and set the interface to your inside/lan interface, fill out source and destination networks and then use the redirect target ip for the NAS internal ip address. 

Thank you, this is the idea I was thinking about and not been able to solve.

Link to post
Share on other sites
Posted · Original PosterOP
30 minutes ago, mynameisjuan said:

If all he’s trying to do is really reach the nas, why even nat. Just go to the private IP

Thanks. 

But you know, office buddies sometimes don't really tell the difference between private IP and public IP, and I just want to save some bandwidth when they try to download some big files from the NAS webUI via public IP. LOL

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Buy VPN

×