NAT possible with single interface box?
Rick van der Zwet
info at rickvanderzwet.nl
Mon Mar 12 13:27:52 UTC 2018
Could NAT translation be done with a single interface system without the
use of VLANs?
I have ,a rather odd, (simplified) network configuration:
- single interface system (Router) which has two private IP addresses
172.16.0.10/24 and 192.168.1.10/24.
- The gateway (to the internet) is found at 192.168.1.1
- The Client with IP 172.16.0.20/24
The Client (cannot be modified) is supposed to connect to the internet
via the Router.
My pf rules on Router are:
nat on sis0 inet proto tcp from 172.16.0.0/24 to !172.16.0.0/24 ->
Router is configured to allow routing:
pf.conf(5) tell me it will do translation on pass through packets:
Translation rules apply only to packets that pass through the
interface, and if no interface is specified, translation is applied
packets on all interfaces.
Looking at tcpdump of the router I do not see packages been translated
yet only being forwarded, which leaves me wondering could this be done
More information about the freebsd-pf