I am working on setting up a new router for our network and im trying to figure out the NAT rules. We have several VLANs that we need to enable PAT on. The issue comes from that we have several public IP addresses that we would like to use in the PAT pool. How would we be able to go about this. We are not doing anything special like port forwarding or redirection. We currently have a 3Gb burstable to 10Gb internet connection. We are free to use IPFW, PF IPF or others.
Internal IP addresses:
192.168.0.0/24
192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
192.168.4.0/24
192.168.5.0/24
192.168.6.0/24
192.168.7.0/24
....we have around 150 networks, using the 192, 172 and 10 ranges
Public IP ranges:
x.x.252.0/24
x.x.254.0/24
x.x.173.0/24
We are currently using a Cisco FWSM with a few PAT IP's setup but the issue is it will use 1:1 NAT until all Public IPs are used the PAT the rest to a single IP address. We would like to PAT to all addresses in a round-robin fashion.
We found the following iptables command, not sure what the equivalent command would be in FreeBSD.
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j SNAT --to x.x.252.0-x.x.252.254 --to x.x.254.0-x.x.254.254 --to x.x.173.0-x.x.173.254
Internal IP addresses:
192.168.0.0/24
192.168.1.0/24
192.168.2.0/24
192.168.3.0/24
192.168.4.0/24
192.168.5.0/24
192.168.6.0/24
192.168.7.0/24
....we have around 150 networks, using the 192, 172 and 10 ranges
Public IP ranges:
x.x.252.0/24
x.x.254.0/24
x.x.173.0/24
We are currently using a Cisco FWSM with a few PAT IP's setup but the issue is it will use 1:1 NAT until all Public IPs are used the PAT the rest to a single IP address. We would like to PAT to all addresses in a round-robin fashion.
We found the following iptables command, not sure what the equivalent command would be in FreeBSD.
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j SNAT --to x.x.252.0-x.x.252.254 --to x.x.254.0-x.x.254.254 --to x.x.173.0-x.x.173.254