Public IPs for both WANs are not reachable from Internet

[Uzair]

After SD-WAN & Traffic shaping config. for dual WANs connections, NATs are also added successfully for both WANs. our Static Public IPs for both WANs are still not reachable. can some one identify the reason and share some solution..?

Plus: from locally connected to same LANs can ping and login to both Static IPs. only face outside traffic.

Thanks !

[Ryan_Miles]

Is your server 192.168.1.94 configured with its default gateway pointing to the MX IP 192.168.1.2?

An easy test is ping the host from other source interfaces of your MX besides the subnet the host is on (192.168.1.0/24). If that fails that likely means your host isn't actually using the correct gateway IP (192.168.1.2).

[Uzair]

i will work on it tomorrow after getting access to the server. thanks !

will update here if it help me.

[Uzair]

i have set gw 192.168.1.2 for server then tried DNS and without DNS, still no outside traffic is working to server. server is unable to talk to the world except LAN.

Our wifi devices on network DHCP are connected to Internet successfully and communicate to the world.

Wifi devices on DHCP are using 192.168.1.2 gw and DNS as 8.8.8.8

[cmr]

What is between the MX and the internet?  Something is translating the public IPs to the 192 addresses shown on the WAN ports.

[cmr]

Your IPv6 address on WAN2 is pingable from the internet, so at least that works.

[Uzair]

WAN2 public IP is only pingable, not working on accessing thru remote login (RDP).

[Uzair]

WANs are directly connected to MX. wan1 wan2. --> then our office network.

ERP server is on same network on 192.xx

both WANs ISP have provided public IPs to access our ERP server from outside world.

thats the story!

thnx

[cmr]

What are your subnet masks, everything seems to be on a 192.168.1.x address, whether it be on the WAN or LAN side?  Are the MXs in passthru mode?

[Uzair]

[cmr]

From above, your WANs also appears to be on 192.168.1.x networks, I'd change either the LAN or WAN IP address ranges to not overlap.

 

[Uzair]

i will work changing for WANs IP addresses to avoid overlaps. thanks !!

[cmr]

@Uzair have you changed the WAN IP addresses yet?  What device gives them that address, the ISP NTE?

[BlakeRichardson]

You appear to be using private IP addresses for WAN IP, these will not be accessible externally unless whatever is setup between your MX and the internet is setup for port forwarding. 

[Uzair]

Thanks for your kind suggestion, can you briefly explain what should i do next? how to set - reconfigure to make public IP accessible through external world ? if you could guide me in steps for correction this configuration pls..