Page 1 of 1

SecureNAT Configuration

Posted: Wed Mar 19, 2025 12:45 pm
by TheyDontKnowMeSon
Hi Guys,

I have the following scenario: The VPN server is in the local subnet eth0 (192.168.0.0/24) with the IP 192.168.0.6. Additionally, eth1 serves as the outgoing connection for client access.

Since there is no DHCP in 192.168.0.0/24 and the available addresses are limited, I would like to configure SecureNAT.

When I create a local bridge and assign an IP to the client manually, I can access all services without issues.
However, when I disable the local bridge and enable SecureNAT (with its default 192.168.30.0/24 settings), I can no longer reach the services.

Do I need to configure a Layer 3 switch, or is it necessary to push a route to enable communication between 192.168.30.0/24 and 192.168.0.0/24?

Thanks in advance for your help!

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 1:34 am
by solo
"Edit Virtual Hub Extended Option List" and set DisableKernelModeSecureNAT = 1

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 7:38 am
by TheyDontKnowMeSon
Hi,

thank you for your reply. Sadly this did not work. I cant ping anything in the 192.168.0.0/24 network.

i tried with this route aswell 192.168.0.0/255.255.255.0/192.168.30.254 with 192.168.30.254 beeing the securenat virtual hosts network interface.

trace route output:

1 567 ms 566 ms 587 ms 192.168.30.254
2 * * * Zeitüberschreitung der Anforderung.

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 9:20 am
by solo
"when I... enable SecureNAT (with its default 192.168.30.0/24 settings)"
"with 192.168.30.254 beeing the securenat virtual hosts network interface"

These statements are contradictory.

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 9:34 am
by TheyDontKnowMeSon
yeah i changed .1 to .254 in my newest try, sry for the misconception

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 11:14 am
by solo
Restore default SecureNAT, disable iptables/firewall, ensure that VPN client isn't locally on the 192.168.0.0/24 subnet and re-try.

Re: SecureNAT Configuration

Posted: Thu Mar 20, 2025 1:56 pm
by TheyDontKnowMeSon
How do i disable iptables and the firewall?