remove NAT

Question

I have a UniFi USG that I want to use with the Nighthawk MR1100, which does works, but I need to be able to build a site-to-site VPN tunnel and since the NightHawk MR1100 is doing NAT on the single Ethernet port, it won't work. Is there a bridge mode or other way to get it so that the device on the network LAN will get the public IP address?

plemans · Answer

have you tried putting the Unifi's IP address into the MR1100's dmz.&nbsp;

slimbo · Answer

No, but I will try it now. I was also thinking of maybe port fowarding just opening it up wide since it's going to connect to a hardware firewall anyway

slimbo · Answer

I enabled the DMZ and then put my firewall WAN port in it, but that did not work ... I looked at port forwarding and there's no option to just allow all, any any. I am guessing that possibly this is not going to work.

plemans · Answer

did you use the ip address for the firewall?&nbsp;What actual device is it?&nbsp;

slimbo · Answer

Well when I enabled the DMZ, it just gave a default of 192.168.1.4 so I put the WAN interface in the same subnet and assigned 192.168.1.1 to it. The Nighthawk itself is set to IP passthrough and VPN passthrough is also enabled. So now when I connect to the ethernet port on it, with DHCP on, it assigns a different private IP like 10.64.193.141. The reason my site-to-site VPN on my firewall isn't working is because of this NAT on the MR1100. I have a UniFi Ubiquiti USG 3.&nbsp;

Forum Discussion

remove NAT

6 Replies