Weird Problem with WAN?!

Options
Username_is_reserved
Username_is_reserved Posts: 118  Ally Member
First Comment Friend Collector Sixth Anniversary
in Security

Well I dont know how but since my ISP Upgradet my Internet to an higher speed everything is weird… No HW changed. I also use the Zyxel Modem from my ISP. The "Dial In" does my ATP.

When I go to Ethernet i see this:

w1.JPG

The show me an 100.X.X.X IP Adress as WAN IP.

When I go to PPP I see this:

w2.JPG

Here I see my fix Wan IP Adress startet 185.X.X.X that is the one who I got from my ISP to access from WAN into my System.

Now the weird thing! When I going to any IP checking Site now the show me an 185.17.X.X IP Adress?? Where does the come from? (Yes it is NOT my fix WAN IP)

So where do I set something that the ATP using my fix WAN IP? So embarrassing. 😪

All Replies

  • PeterUK
    PeterUK Posts: 3,889  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 7

    Don't know much about PPPoE and think I would not like how it works.

    So the WAN is getting 100. which I guess is 100.64.0.0–100.127.255.255 ? used for CGNAT my guess is you are SNAT off this from some WAN IP that is not your WAN IP by PPPoE

    If you make a routing rule like
    incoming any or LAN
    nexthop your PPPoE interface
    SNAT outgoing-interface

    Then you will use your WAN IP

    or you can set up a trunk with your PPPoE set by User Configured Trunk

  • Zyxel_Tina
    Zyxel_Tina Posts: 75  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 5 Answers First Comment

    Hi @Username_is_reserved,

    Thanks for the detailed information!

    To better assist you, please provide your device's diagnostic file via private message. You can refer to this FAQ for instructions on how to collect the diagnostic file.

    Zyxel Tina

  • Username_is_reserved
    Username_is_reserved Posts: 118  Ally Member
    First Comment Friend Collector Sixth Anniversary
    edited July 23

    With playing a lot with the Settings now it seem to work.
    I dont know why that happen.

    Is there an easy way to get to force an (Virtual) Machine an specific Wan Service who start with 100.X.X.X ?
    Its because it would be nice to be behind the Virtual IP Adress from the ISP for some Machines to not expose my Fix Wan IP. (I will try to play around my self to.)
    Thanks

    EDIT!
    I am happy to found it out much quicker as I tought. Its "that" easy by create a Policy Route. I will write an differen Article here.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）