pfSense Support Subscription

Author Topic: Outbound NAT (& UPnP) problems  (Read 243 times)

0 Members and 1 Guest are viewing this topic.

Offline reilos

  • Jr. Member
  • **
  • Posts: 49
  • Karma: +5/-0
    • View Profile
Outbound NAT (& UPnP) problems
« on: December 17, 2017, 04:26:03 am »
Hi all,

I'm breaking my head over the following. For two devices, each on a different subnet, one cable connected, the other one via an access point (both connected to the same managed switch), i have configured static outbound NAT, as well as UPnP. This used to work, untill a few weeks ago (don't know exactly how long ago, since the ones using the devices didn't complain until after weeks).

I never anymore see any UPnP rules in Status --> UPnP & NAP-PMP
One of the devices is a Nintendo Switch, which I will use as an example. The connection test on the Nintendo Switch keeps saying the NAT-type is D, while after setting static outbound NAT, it should be B.

See screenshots for relevant settings. Would really appreciate some help :)
« Last Edit: December 18, 2017, 06:44:18 am by reilos »

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21495
  • Karma: +1458/-26
    • View Profile
Re: Outbound NAT (& UPnP) problems
« Reply #1 on: December 18, 2017, 08:08:53 am »
Are you 100% sure that your switch pulled that IP address? The rules look correct, but if it isn't showing the correct NAT type then something about them must not be matching properly.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline reilos

  • Jr. Member
  • **
  • Posts: 49
  • Karma: +5/-0
    • View Profile
Re: Outbound NAT (& UPnP) problems
« Reply #2 on: December 18, 2017, 08:42:58 am »
Hi jimp,

I'm sure it pulled the correct IP address. I checked it on the Switch itself (network settings as well as diagnostics). Also the IP shows 'online' (DHCP status) and I see a few active states when connected.
EDIT: And I see the correct entry in the ARP table.
« Last Edit: December 18, 2017, 08:58:32 am by reilos »

Offline reilos

  • Jr. Member
  • **
  • Posts: 49
  • Karma: +5/-0
    • View Profile
Re: Outbound NAT (& UPnP) problems
« Reply #3 on: December 19, 2017, 06:11:03 am »
Anyone has another idea what the problem might be?

I read in an old thread here that adding multicast rules to the LAN might help, but i already have an allow all from LAN net to all, so that doesn't seem to make sense in this case.

Offline reilos

  • Jr. Member
  • **
  • Posts: 49
  • Karma: +5/-0
    • View Profile
Re: Outbound NAT (& UPnP) problems
« Reply #4 on: December 25, 2017, 07:17:12 am »
OK, i somehow got it working. I'm not 100% sure what the problem was eventually. The changes:

Only disabled UPnP/NAT-PnP on OPT1; so now it's only on LAN enabled and only the Nintendo Switch and the same port range allowed.
Removed the static outbound rule for client on OPT1; so now there is only the static outbound rule for the Nintendo Switch left.
Created a port forward NAT rule to redirect all DNS requests to pfSense resolver on the LAN (and the same for OpenDNS on OPT1).
Redid the VLANs on my managed switch

I'm 99.9% sure that I have the exact same VLAN config as before, but yeah, it also seems very unlikely that the problem was related to one of the other three settings, unless anyone has some other insights...