March 7, 2009 at 3:39 pm #41520
I have the following setup:
The ADSL modem/router already does NAT.
Is it possible for ZeroShell to forward outgoing packets to the Internet via the ADSL modem/router without doing NAT on them, ie, only do routing/forwarding?
Thank youMarch 9, 2009 at 8:03 am #47709
Network -> Router -> NAT
Remove the interface that connects to the modem-router from the NAT Enabled Interface list.March 9, 2009 at 11:06 am #47710
It does not work. As soon as I re-add the interface to the list of “NAT Enabled Interfaces”, it works again!March 11, 2009 at 5:25 am #47711
Any one can help?
ThanksMarch 11, 2009 at 6:42 am #47712
1. check if ZS and adsl router are in the same subnet (they should be).
2. ZS Should have adsl routers IP as a Default Gateway (PCs in lan should have ZS as their GTW)
3. DNS forwarders in ZS should be set to adsl router
4. disable NAT in ZS
I can’t be certain this is a solution. This is in general.
you sholud post more info on your configuration.March 11, 2009 at 7:16 am #47713
Thanks for replying.
LAN computers use 10.0.0.0/16 subnet and have 10.0.0.3 as their gateway.
ZeroShell LAN interface IP address: 10.0.0.3/16
ZeroShell WAN interface IP address: 10.1.0.1/16
ZeroShell gateway: 10.1.0.3
ADSL modem/router LAN interface IP address: 10.1.0.3March 11, 2009 at 9:07 am #47714
then considering everythig a alredy said you should add in your adsl router a static route to your lan subnet and set next hop (gtw) as 10.1.0.1/16 (your ZS)
as i can see you have a big network since you use class B subnet (16).
Consider the ability of your adsl router and hardware you run ZS on because it can slow down your network. If you network is not that big (more than 250 clients) you should use C class subnet (24).
hope this helpsMarch 11, 2009 at 1:37 pm #47715
It does not work. As soon as I re-add the interface to the list of “NAT Enabled Interfaces”, it works again!
For what reason you re-add it? You need to remove it from the NAT Enabled Interfaces list.March 11, 2009 at 7:33 pm #47716
I think ZS in Bridge mode may help you.March 12, 2009 at 6:11 am #47717
OK. It’s working. I think adding the static route was the solution.
However, I am unable to ping the LAN interface (10.1.0.3) of the ADSL modem/router from a PC on the LAN!
I can ping the WAN interface of the ZeroShell firewall (10.1.0.1).
But I can access the internet without any problem!March 12, 2009 at 10:29 am #47718
Does the modem have a static route for the 10.0.0.0/16 subnet? If not, it cannot communicate with your LAN clients and you need to install a static route on the modem for 10.0.0.0/16 via 10.1.0.1March 19, 2009 at 6:05 am #47719
Yes, it does. But, I’m still unable to ping it!March 23, 2009 at 7:53 am #47720
If routing is ok, then you need to check any firewall that might be blocking your traffic.
You must be logged in to reply to this topic.