Posted: Tue Nov 19, 2013 19:52 Post subject: Urgent One to One Nat assistance required
My apologies in advance as I don't know if is the right place to post this:
We have 62 static addresses from our isp. We need to assign some of our internal devices (copiers, voip phones, etc) public addresses. From my previous draytek router there was an option to add a 2nd network. This is where we added the addresses.
From my understanding I will need to have a One to One Nat configured on the dd-wrt. I have read numerous articles on here as well as the official One to One NAT page but i can't seems to find the solution.
I have got the start-up script right but the firewall script is where i am having issues
WANIF=`get_wanface`
ifconfig $WANIF:1 xxx.xxx.xxx.65 netmask 255.255.255.192 broadcast xxx.xxx.xxx.127
WANIF=`get_wanface`
ifconfig $WANIF:2 xxx.xxx.xxx.66 netmask 255.255.255.192 broadcast xxx.xxx.xxx.127
----------------
WANIF=`get_wanface`
ifconfig $WANIF:62 xxx.xxx.xxx.126 netmask 255.255.255.192 broadcast xxx.xxx.xxx.127
There's nothing to work w/ here. Those ifconfig lines are part of the startup script, which you said you had “right”. But then you tell us you're having problems w/ the firewall script, and leave it there.
All I can recommend at the moment is the dd-wrt wiki:
Beyond that, until you describe what you did w/ YOUR firewall script and what's happening (error messages, behavior, etc.), as I said, there's nothing to work with here.
Sorry if i am being vague. I understand that in order for my setup to work i need to:
1. retrieve the addresses from my isp which is the startup script:
WANIF=`get_wanface`
ifconfig $WANIF:1 xxx.xxx.xxx.65 netmask 255.255.255.192 broadcast xxx.xxx.xxx.127
WANIF=`get_wanface`
2. assign the static addresses to the LAN address. which is the firewall script. Here is my code so far:
#CopierReception 192.168.1.13
iptables -t nat -I PREROUTING -d xxx.xxx.xxx.65-j DNAT --to 192.168.1.13
iptables -t nat -I POSTROUTING -s 192.168.1.13 -j SNAT --to xxx.xxx.xxx.65
iptables -I FORWARD -i $WANIF -d 192.168.1.13 -j ACCEPT
This seems to be working for some of the devices but not all. This solution is perfect for the VOIP phones but not for the copiers as the copiers are attached to a remote server. The copiers need public addresses assigned in order to print from the server.
Is there any way i can manually input the public addresses without relying on the NAT configuration?
You need to use VLAN's to put the copiers in the same VLAN as the WAN port so that they are directly connected to your ISP. _________________ Read the forum announcements thoroughly! Be cautious if you're inexperienced.
Available for paid consulting. (Don't PM about complicated setups otherwise)
Looking for bricks and spare routers to expand my collection. (not interested in G spec models)
i finally found an article that is the solution to all my problems and then relaised that my router (wndr3700v2) chipset isn't vlan supportive.
Is there any other way around this?
