Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Jul 2009 13:56:30 -0700
From:      Elliott Barrere <elliott@mywedding.com>
To:        freebsd-pf@freebsd.org
Subject:   CARP and NAT
Message-ID:  <F8BCDF7F-400D-4134-BC62-A7BE16F40C00@mywedding.com>

next in thread | raw e-mail | index | archive | help
Hi everyone, please excuse my noobiness.

I have a basic firewall setup with CARP running on the LAN and WAN  
interfaces.  CARP and pfsync seem to be functioning properly.  The  
problem is I can't seem to figure out how to make pf NAT from the  
internal network to the carp1 interface IP on the outside (packets  
always end up coming from the IP of the physical interface in question).

I thought I could do something like:

nat on $carp_if from $lan_net to any -> ($carp_if)

but that doesn't work.  Can anyone provide me examples of a setup  
using CARP and NAT?  I feel like this should be pretty common...


Thanks!

:: elliott barrere :: 206.855.7011 ::






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F8BCDF7F-400D-4134-BC62-A7BE16F40C00>