First, I want to say I am very enthusiastic about the MonoWall product
and I am appreciative of all the energy that has gone into it!
My goal is to simply setup multiple IP addresses on WAN and be able to
NAT them to my private IP space on LAN. My ISP gives me the following
static block 188.8.131.52/28. I have set up 184.108.40.206 to be the
primary address with a /28 definition. I setup my gateway to be
220.127.116.11. All traffic goes through NAT as expected.
I want to NAT 18.104.22.168 to my private network on LAN. I go to
Server NAT and add an additional external address for 22.214.171.124. I
then create my NAT rule against the 126.96.36.199 address. Sure enough,
I can connect to my service in the private network but only for about 30
seconds. If I try to reconnect, it is blocked. If I wait about 15 to
30 minutes, I can connect again to my service only to experience the
disconnect again after about 30 seconds. I enabled Proxy Arp for the IP
Address and this did not seem to make a difference.
The configuration utilizes a switch to bridge the MonoWall to the ISPs
router. I speculate this could be causing a problem. On the same
switch, I have another Astaro firewall that I am hoping to migrate to
MonoWall. It looks like the following:
ISP-----> Switch---> Monowall
Router-> Switch---> Astaro Firewall
The Astaro has a nice feature called "Additional IP on Interface" and I
have successfully used this to get multiple IP addresses working. I
have confirmed that the Astaro firewall is not referencing any of the IP
addresses I am trying to reference via Monowall.
Any thoughts would be greatly appreciated!