Forum Discussion
ithero
6 months agoFriendly Neighbour
Telus Fiber + Static Public IPs: NAH must not be in Bridge mode?
I keep hearing over and over again from Telus on-site techs and support agents that the Network Access Hubs will not work with Static IP addresses if set to Bridge Mode and they should be set to Rout...
bimmerdriver
6 months agoAdvisor
What is your configuration? Who is providing the static ip address(es)?
- ithero6 months agoFriendly Neighbour
Telus of course. LAN > Enterprise Firewall > Telus NAH > Fiber > ISP.
5 Static IP addresses from Telus.
I am assigning them to the Firewall's WAN interface.
Branch offices and Remote users must be able to establish VPN tunnels with the Firewall (VPN Gateway) over those IP addresses.
This means that the Network Access Hub must transparently pass-through the packets.
Telus claims that NAH must be set up in Router Mode for the static IPs to work. Router Mode means NAT.
- Butter-Biscuit2 months agoNeighbour
Replying so that others can find this (hopefully you figured this out already).
The Telus network access hub does in fact need to be in router mode for static IPs to work. Your device will get a 192.168.1.x IP if you have them set to DHCP. If you set the static IP that Telus gave you, the NAH will do something internally and then you will have a public static IP without NAT. It sounds counterintuitive but that's how it works. Bridge mode will only get you a dynamic public IP. - bimmerdriver6 months agoAdvisor
What kind of NAH is it, NH20A or NH20T? I have an NH20T. It has a setting to configure a static subnet on the LAN, but there aren't any settings on the WAN side for static ip addresses. You might be better off with an ONT rather than an NAH.
- ithero6 months agoFriendly Neighbour
Static IPs configured on the WAN side of the NAH is what I am trying to avoid.
The very fact that NAH has 2 sides: WAN and LAN means that is acts as a router/NAT.
I need the static IPs configured on my own business firewall, that takes on the entire role of the router/VPN gateway/firewall. While the NAH in front of it must act as a "dumb" pass through converter from fiber to copper (modem).