First, I want to say I am very enthusiastic about the MonoWall product
and I am appreciative of all the energy that has gone into it!
My goal is to simply setup multiple IP addresses on WAN and be able to
NAT them to my private IP space on LAN. My ISP gives me the following
static block 184.108.40.206/28. I have set up 220.127.116.11 to be the
primary address with a /28 definition. I setup my gateway to be
18.104.22.168. All traffic goes through NAT as expected.
I want to NAT 22.214.171.124 to my private network on LAN. I go to
Server NAT and add an additional external address for 126.96.36.199. I
then create my NAT rule against the 188.8.131.52 address. Sure enough,
I can connect to my service in the private network but only for about 30
seconds. If I try to reconnect, it is blocked. If I wait about 15 to
30 minutes, I can connect again to my service only to experience the
disconnect again after about 30 seconds. I enabled Proxy Arp for the IP
Address and this did not seem to make a difference.
The configuration utilizes a switch to bridge the MonoWall to the ISPs
router. I speculate this could be causing a problem. On the same
switch, I have another Astaro firewall that I am hoping to migrate to
MonoWall. It looks like the following:
ISP-----> Switch---> Monowall
Router-> Switch---> Astaro Firewall
The Astaro has a nice feature called "Additional IP on Interface" and I
have successfully used this to get multiple IP addresses working. I
have confirmed that the Astaro firewall is not referencing any of the IP
addresses I am trying to reference via Monowall.
Any thoughts would be greatly appreciated!