WIKIABOUT

FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

Most popular tags

rut955 rut240 rut950 rutx11 rms vpn to openvpn wifi not sms trb140 firmware connection - ipsec on rutx12 rutx09 modbus
We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.

Do sNAT for two LAN hosts to leave router with different WAN IPs

0 votes
246 views 1 comments
by anonymous
Hello dear forum members,

I've been struggling my way in finding how to configure my RUTX12 device to performed sNAT for two different LAN hosts where each one of them will leave the router with different WAN IP.

My router has two WAN (MOD) interfaces connected to different LTE network providers.

Is it even possible to do through the WEB-GUI interface? - I didn't find such an option

Is it maybe possible to do through the custom firewall rules section?

Thanks in advance

Shay

Firmware version: RUTX_R_00.07.01.4

Kernel version: 5.4.147

1 Answer

+1 vote
by anonymous

Hello,

In this case I'd recommend using advanced static routing option. The default firewall rules will apply to both mobile interfaces (masquerading included) but after defining static route, the router will lookup the incoming (source) IP address as well as destination address in the packet header - if it matches the routing rule then the packet will be processed accordingly. 

We have a guide on our wiki page describing and showing the process of how to configure the all of the required rules. Please refer to it here: https://wiki.teltonika-networks.com/view/LAN_Traffic_Splitting_Using_Advanced_Static_Routing_Rules

A couple of notes I'd like to highlight:

  • I would recommend configuring static IP address on the end-device or, even better, a static LAN IP lease bound to end-device MAC address. This way the routing rule will always point to the correct device and no other device would get the specified IP address assigned.
  • When configuring the routing rule priority, it's recommended to keep it as low as 1. This is because routing rules are processed from lowest to highest priority.
  • It's strongly recommended to configure this rule locally and not remotely unless it is known that the rule will function as intended.

Let me know if this works for you.

Best regards,

Tomas. 

Best answer
by anonymous

Thanks a lot, this article https://wiki.teltonika-networks.com/view/LAN_Traffic_Splitting_Using_Advanced_Static_Routing_Rules has helped me in getting what I needed.