Question

Hello dear forum members,

I've been struggling my way in finding how to configure my RUTX12 device to performed sNAT for two different LAN hosts where each one of them will leave the router with different WAN IP.

My router has two WAN (MOD) interfaces connected to different LTE network providers.

Is it even possible to do through the WEB-GUI interface? - I didn't find such an option

Is it maybe possible to do through the custom firewall rules section?

Thanks in advance

Shay

Firmware version: RUTX_R_00.07.01.4

Kernel version: 5.4.147

Answer 1

Hello,

In this case I'd recommend using advanced static routing option. The default firewall rules will apply to both mobile interfaces (masquerading included) but after defining static route, the router will lookup the incoming (source) IP address as well as destination address in the packet header - if it matches the routing rule then the packet will be processed accordingly. 

We have a guide on our wiki page describing and showing the process of how to configure the all of the required rules. Please refer to it here: https://wiki.teltonika-networks.com/view/LAN_Traffic_Splitting_Using_Advanced_Static_Routing_Rules

A couple of notes I'd like to highlight:

• I would recommend configuring static IP address on the end-device or, even better, a static LAN IP lease bound to end-device MAC address. This way the routing rule will always point to the correct device and no other device would get the specified IP address assigned.
• When configuring the routing rule priority, it's recommended to keep it as low as 1. This is because routing rules are processed from lowest to highest priority.
• It's strongly recommended to configure this rule locally and not remotely unless it is known that the rule will function as intended.

Let me know if this works for you.

Best regards,

Tomas. 

Comments

Thanks a lot, this article https://wiki.teltonika-networks.com/view/LAN_Traffic_Splitting_Using_Advanced_Static_Routing_Rules has helped me in getting what I needed.