Unifi multiple wan ip. ADMIN MOD How to set static WAN ip on UDM Pro .
Unifi multiple wan ip xxx. I need to be able to route multiple WAN IPs for various servers, To fix this issue, try to re-configure your ISP modem/router into bridge mode so that your UniFi Gateway can obtain a public IP address on the WAN interface. 51. Multiple WAN IP setup for Unifi-XG-8 . There is no need for NAT unless you have a routable, or public IP/subnet coming into your USG. I have need for vlan1 to go with wifi 1 all isolated on a *. 0 this release has added a lot of new features as well as new UI design. The Unifi range of hardware is very nice. I read on a Unifi forum that I could assign the /29 to a new VLAN and then add devices to that VLAN to pass through I verified that both connections are working, as I can switch back and forth between the two on the regular RJ45 WAN port (port 9) and get an internet connection without issue. For this example, I have Public IP “A” and Public IP “B” assigned to eth0 with This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. Latency (average, minimum, Multiple devices are using the same IP address on 192. I have one device running UniFi OS UDM Pro 1. As To verify that the firewall rule is properly configured, try to access the UniFi OS console by its WAN IP, its dynamic hostname, or the hostname associated with the IP address. json file usually located in the sites/default directory of your controller. 4. It also looks l On my newly installed Unifi USG (Unifi Security Gateway/Controller) at home i have two static IP Internets connected to : WAN1 (ETH0) : xxx. Once configured they send ICMP ping requests to my WAN IP address and collect the Hello all I have FTTH, the Openreach ONT is connected directly to my USG-3P WAN port (I removed the ISP-supplied modem/router as the USG can do the authentication required for The UDM can use a VLAN for WAN but just that single one - it really just changes whether it treats untagged VLAN1 versus tagged VLAN x as the WAN. *. 0/24 dev eth8. If one of these addresses have Standard linux tools available now, so I can use ip, route and resolv. 43 since Buy Ubiquiti Gateway Max, Compact, Multi-WAN UniFi Gateway, 2. 5G Multi Hi, I have FTTP with Zen in UK and im considering ordering multiple IPs for this connection for multiple hosts on the network but before I do im struggling to see how I could Ubiquiti UniFi UDM-Pro-Max Dream Machine Pro Max professional-grade, rack-mount Cloud Gateway with 10 Gbps performance, multi-WAN load balancing, and two NVR drive bays designed for large-scale, multi-application UniFi sites. We’ve tried editing the I’m aware I can utilize multiple WAN IP addresses and utilize the port forwarding to dedicate a single IP towards an internal device behind NAT. Then just UniFi USG-XG, USG-4-Pro and UDMP all don't support RTSP and multiple WAN IP addresses. UDM-PRO Multiple WAN IP . So I input the IPs and try to then setup a port forward to the server internal IP but it does not open the port and route to It looks like there might be a way to set this up by setting up multiple WAN IP addresses, and using a different WAN IP for each subnet under the UDMP. The idea is I'd have one VLAN management network for my two servers' iDRAC interfaces, another VLAN for Multiple WAN IPs are now a thing in the UDM General Release 1. 50 (each one is a dmz) I’m trying to setup VPN tunnels on each device so I can get WAN Interface with multiple IP addresses, VIPs and outbound NAT Hi, see attachment for an overview of my scenario. I create a few networks, Traffic routes and then take a quick look a The addition of a second public IP address is made by creating a config. Members Online • If your WAN2 provider can offer you multiple IPs in a /29 network then that’s great too, but expect to pay for it. 0 with the Internet device being 10. 180 for eth4, and 192. Need a little guidance on how to accomplish feeding another WAN IP address to an IDF with Unifi. I did some testing. (192. Assign the public IP address(es) to the WAN interface and enable the Proxy ARP functionality. Site Magic supports both Hub-and-Spoke and Mesh topologies. By default, the DNS server is your UniFi Cloud Go to UNIFI r/UNIFI. 1. WAN2 (ETH2) : Not necessarily, IP lives on level 3, while MACs are on layer 2. The thing about these, is that they both have local addresses in to the router. I self host a number of In this video we take a look at the Unifi dream machine firmware 1. Keep in mind that UniFi will only update the records if your WAN IP Address changes. At home I have I've got about 400 Unifi items across 25 clients on a single unifi panel. Has anyone been able to get the UDMP to port forward on multiple public IPs. 20 in conjunction with the multiple WAN IP feature. I am trying at the built in web interface after a factory reset. 67. 1, I Another response from UI Support: "This is not a bug, instead this issue occurs when multiple IP address are added on the WAN Interface. Site Magic supports both Hub-and Is it possibly to set this up on UniFi, maintain the WAN’s but stop the downsides ? Even if it was just access to the P2P aerials it would help (since when somethings down it’s normally an aerial). Unlike the USG, there is no way Multiple devices are using the same IP address on 192. The following IP addresses will prohibit the use of Dynamic DNS: 10. Then cross UDMP - Multiple Public IP addresses and port forwarding. Archived Multiple Static WAN IP addresses on single connection This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. We just got a block of 5 IPs from ISP. Rule Applied: select Before Predefined 重分配 WAN 和 LAN 端口，以靈活地將 UniFi 閘道器的主要 (primary) 和輔助 (secondary) 連接 (Internet) 分配到 RJ45 或 SFP+ 端口。 注意：鏈路聚合 (LAG) 在 UniFi 閘道器 LAN 端口上不可用。 重分配 WAN 和 LAN We have a USG pro and would like to configure the WAN2 port to use a different static IP address. It's user-friendly and suitable for those who prefer a visual approach. r/UNIFI. If the wan configuration of the existing routers About a year ago, I switched to a different ISP offering 8Gbit Fiber. Once configured they send ICMP ping requests to my WAN IP address and collect the 以上完成設定後，就可以用 WAN IP 遠端連線 UniFi UDM-Base / UDM-Pro 主機，是不是很簡單~ 如何從 Hostname 遠端連線 但，很多人網路不是固定制，希望是從 Hostname 網 Method 1: Changing IP Address via UniFi Controller GUI. This will be supported by UniFi Gateways Help understanding multiple WAN IP's and VLANs with UDMP and Switch Pro . So I got the information and I went to: Settings > Internet > WAN (edit) > IPv4 Unifi UDM Pro & SE WAN Change Hello All, In general, a router is routing between different IP networks and will not allow to have multiple interfaces in the same subnet. My network is by default configured to use the 192. json in this The Site 2 Site VPN connection with the remote site that has a dynamic WAN IP is set up using the suggestion in this post: how to configuration site to site vpn ,Client having dynamic ip and client having mikrotik router . 254 and teh WAN of the UDM being 10. Requirements. When ever your router first gets a packet for IP it doesn’t know MAC address of, it should do ARP via broadcast address to Hi, I have FTTP with Zen in UK and im considering ordering multiple IPs for this connection for multiple hosts on the network but before I do im struggling to see how I could This innovative technology simplifies the process of connecting UniFi Gateways across multiple locations, making it a breeze to create a high-performance and scalable SD-WAN network. Assigning All of our Unifi devices have static IPs, all of the others clients are DHCP. I have a fiber internet connection with multiple IP addresses. 113. 0. I have setup 60 pieces of UniFi hardware Already on my udm , access points , switches, all UniFi. It's OK, and even good, I recently signed up with thinkbroadband for free Broadband Quality Meter (BQM) service. In meiner Blog-Reihe “Snippets aus der Praxis” nehme ich dich mit in meinen Alltag und zeige dir wie ich However, since setting up this equipment, I've noticed that my WAN connection drops multiple times a day and the only way to resolve is to go to the Unifi Controller and reboot the USG. So Hi All, I am currently ripping out an openmesh/datto wlan setup and replacing it with unifi (wifi only, not the firewall). Technically, my guide is Changes in your WAN IP address are not being received by the Dynamic DNS provider’s server. My two Create a group of CF ip's and ports group see here for more information. Please share this video - https://youtu. 5 GbE support for high-performance networking at small-to-medium sites. While you do lose a lot Site Magic SD-WAN simplifies the setup of Site-to-Site VPN tunnels between UniFi Gateways, enabling seamless resource and application sharing across multiple sites. Back. (I added 9. conf to fix networking problems on the WAN without a controller, which is what I needed. Question I have a new connection and have a primary WAN IP delivered via DHCP and a second address that needs to be manually added. I have the 5 usable IP addresses from this block assigned on the UDMP, one as the "main" IPv4 address, used for most networks, and Since it seems it cannot utilize multiple WAN IP's it cannot be the first thing after my Fiber connection routing all the WAN IP's off, should I have a Unifi switch before that to route the 8 Scenario: I'm trying to setup 2 minecraft servers (for my kids): 1 vanilla, and 1 modded. All of those are working fine. 2. While on my LAN I can access the UDM via the In order to keep the configuration persistent across reboots, it has to be provisioned from the Unifi Controller via a config. . You need to When your client devices are getting an IP Address from your UniFi Cloud Gateway, they not only get a local IP Address that the client can use but also the DNS server. Packets to the static IP address are routed to the Type: select Internet Local from the dropdown list Give the Rule an appropriate description, making it easy to see what the purpose of this rule is. I've tried changing the UI configuration to Next Hop with the IP address of WAN. Such as 4100, 4500, 6000 etc. TAKE Some time ago I bought new network gear for my home from Ubiquiti. An independent UniFi Gateway or UniFi Cloud Gateway; NAT Types. Assign Public IP 1 to WAN1, assign Public IP 2 to WAN2. None of the MAC addresses are the This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. I recently signed up with thinkbroadband for free Broadband Quality Meter (BQM) service. 5 GbE Support Small-to-medium Sites, Up to 1. Configuration was done via GUI. Members Online • Ihate440. Even though they have separate MACs it will sometimes use the same IP and because it swaps quickly Unifi sees the same IP from 2 MACs Reply reply Dual UDM Pro Max in shadow mode, dual WAN and 5Gbps fiber upvotes Ubiquiti UCG-Max Cloud Gateway Max 1. Meraki makes it so easy with multiple WAN IP addresses and assigning services, Ubiquiti One of the most basic features on consumer and professional routers is the ability to assign and route multiple external static IP addresses and route them internal hosts. If you run a traceroute My DSL provider TAL. The dynamic IP address is the primary one, used for accessing the internet. It’s a bit pricy but you can do so much interesting stuff with it and the hardware is rock solid. If your WAN IP address within any of the following ranges, then your ISP is supplying a CGNAT IP Connecting the UCG to it will provide a 192. I swapped to static and was able to put my primary The subnet on the WAN side of your router is non-routable, or private. On WAN 1 or WAN 2 Select PPPoE, enter your credentials, select Advanced Config, and then you can see “add additional IPs. 168. 9. But for this network I need to add a 192. Look at the Unifi controller page for WAN IP. Each one as a WAN ip of 10. . UniFi supports many Dynamic DNS providers and sends updates automatically without When your client devices are getting an IP Address from your UniFi Cloud Gateway, they not only get a local IP Address that the client can use but also the DNS server. I also know that 🌐 Multi-Site Support: Monitor and manage multiple UniFi sites from a single dashboard; 📊 ISP Metrics: Track network performance metrics including: . The gateway comes with 4 built-in LAN ports, of which one is remappable to a second Compact, multi-WAN UniFi gateway with full 2. We have a range of static IPs from our ISP, and we need to translate a few of those My ISP works with different VLANS (300 for internet and 640 for iptv). If Works best if you set up multiple VLANs and assign the client devices to them via the switch ports or the associated SSID for the WiFi set up for each. Question (not configured for failover only) WAN 1 on eth4 and WAN 2 on eth3. There is no Pro if they dont UDM-Pro and Multiple WAN Static IP??? Is it true that the UDM-Pro does not support more than 1 WAN Static IP address? Im looking at upgrading from the edgerouter pro to the UDM-Pro as We are a small business (10 users) and are planning to replace our aging Cisco ASA 5505 with a UDM Pro. The clients sharing the same IP address are phones, tablets, and computers. 5 Gbps Routing with IDS/IPS, 2Yr Warr - UXG-MAX from Ubiquiti. Reply reply Suggestions Is there a location to find the FULL WAN info my ISP has assigned me via the UniFi dashboard? I can see the WAN IP, but I cannot see the Gateway,Subnet, and/or DNS it's using. 2. However unlike the ER series where I could My understanding is that the 'fixed IP' in Unifi is essentially a static DHCP reservation, which would argue for it needing to be 'in' the DHCP range, but I'm not 100% certain about that. 186 IP address as the source address, the remote system reports the connection as coming Now assign the first usable IP of your /26 to your LAN-facing interface (or any IP in that range, but traditionally the first usable is the gateway). So, i have a client who has leased some public IP’s from different subnets, for Hello, I just purchased a Unifi Dream Machine Pro, and I am wondering if anyone was able to configure multiple VLANs on the same WAN port. I have 5 available static IP addresses, which I added in WAN settings to my UXG-Pro : This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. NAT on UniFi Gateways provide control over translating traffic to and from the WAN and other interfaces. There is a small chance the Meraki Guys, I installed a bunch of usg pro 4’s yesterday. Works great on UDM PRO running 3. For this example, I have Public IP “A” and Public IP “B” assigned to eth0 with The UDM Pro and Dreamwall Pro pretty much treat anything outside of the WAN port as intenet and isolates everything inside the LAN side so there really is no way to allow the traffic I want The UniFi Cloud Gateway Ultra is a small but powerful multi-WAN UniFi gateway. de offers to assign a static and a dynamic IP address on PPPoE dial in. With the Gateway configured with the Public Subnet, we can attach our available IPs to the UDM Pro WAN port. x address on the WAN port. I am using a PPPOE fiber connection as my primary and a Static Copper connection Hello All, I have configured a jsonfile in order to add multiple ip addresses to the same WAN Interface and port forward through that second Public Hi everyone! I’m stuck on a tough case and i could really need your Ubiquiti expertise. It does appear to work with the UDM Pro. 0). How do I go about tracking this down? This It’s still a bad practice to port forward. Some time in the last 2 weeks, To make use of DDNS you’ll need to guarantee that your UniFi Gateway has a public IP Tackle. Now I know the USG isn’t capable of multiple wan setup unless you change settings in the json config. Note: It is possible to forward multiple WAN ports to the same LAN port. Log into your UDM Pro, you can likely access it via Plugging in static IP, subnet, gateway, DNS, hit save. Unifi added support for listing multiple public WAN IPs from firmware 1. Die UDM ist das Gateway und dessen IP lässt sich unter Netzwerk -> Default LAN > Gateway In this video I show you how to setup the UDM pro failover and Multi-WAN IP. ADMIN MOD How to set static WAN ip on UDM Pro . If you want to forward with non contiguous source IP, you need to either define a range wide enough to contain both (really bad idea) or make two ip route add 208. Is there anyway to mimic this in the USG? Thanks ! If you doing multiple ports, use commas in-between. Once everything is This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. It can take a couple of minutes for the DDNS record to update. 40. Step 1: Access the UniFi Snippets aus der Praxis – Unifi WAN IP Änderung: So erhältst Du Benachrichtigungen und behältst die Kontrolle. gateway. Ask a related question Alternate Port Setup for WAN router config access. Anything on the UCG networks regardless of the subnet you create is going to be doubled NAT’d. It allows you to use 249 IP Addresses by default, which is enough for most small networks. We still need SNAT/DNAT rules but this is a great start! In this video I take a look at how we can use Multiple WAN IPs on our UDM pro or UDM SE. Question I have searched through a few threads on the Ubiquiti forums in regards to utilizing This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. please take the time to edit it and add as many More and more of our captive portal customers have been asking for instructions on how to access the UniFi Network Application by the public IP address or hostname when using a UniFi Guys, I installed a bunch of usg pro 4’s yesterday. the-Space-Monkey • The FAQ says: How many UniFi Network devices does UniFi Express support? UniFi Express 3. The only RJ45 ports that can be used as WAN are port 9/WAN and port 8. We still need SNAT/DNAT rules but this is a great start! Let’s set them up! 00:44 – To the UDM Pro! 02:30 – Site Magic SD-WAN simplifies the setup of Site-to-Site VPN tunnels between UniFi Gateways, enabling seamless resource and application sharing across multiple sites. If I I switched to a /28 block through my ISP recently. By default, the DNS server is your UniFi Cloud I'm not using the multi WAN IP settings via the GUI as it didn't help route traffic because I have two different sets of WAN IPs, one via DHCP and one statically assigned which the GUI Hi, thanks a lot for your suggestions ! I have the same and it works. 0/24. Members Online • matt_spl I just know that 6. UniFi APs can have multiple SSIDs as Hi, I am looking at putting in a Unifi setup. When installing, we just use On my newly installed Unifi USG (Unifi Security Gateway/Controller) at home i have two static IP Internets connected to : WAN1 (ETH0) : xxx. 50 (each one is a dmz) I’m trying to setup VPN tunnels on each device so I can get I am not aware of a way to modify my guide to balance a single vlan/ip address across both WAN, while also keeping the other vlans dedicated to a primary WAN. On the openmesh setup there was a guest network, but it did NOT use Your UniFi gateway must have a public IP address for Dynamic DNS to work properly. Using Fortigate 92D on 5. It seems Ask our UniFi GPT. */24 network and the same I've got a /29 of which 1 IP is allocated to the WAN port for internet. json file in /srv/unifi/data/sites/default/ (I'm using a CloudKey controller) and Multiple WAN IPs are now a thing in the UDM General Release 1. Ubiquiti has made some good progress here. 254. I have a UDM with cloud access. 3940 with 7. 1 286. Create a port forwarding from the UI and fill in what you needs. It' s like a crossing, there are not two Right now we are using just one WAN IP for internal network (server, workstations and one DVR) and VOIP on a different LAN subnet. ADMIN MOD Multiple WAN IP's will come to the UXG-Pro and This is a two-stage solution which uses one set of switches to connect all the different areas and provide connectivity to all the UniFi devices while the UniFi network provides all the WiFi and This is most likely because you have multiple VLANs on WAN so the config_network_wan in the inform gets confused (hence the controller displaying 0. My ISP segregates internet traffic (VLAN 35) This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. * dns. Currently the only way to achieve this on Unifi This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. I have one WAN interface with multiple Host your own servers with a Fixed IP address online to reduce server software costs. The config. I have Service Type "DynDNS (dynamic)" selected, then choose the appropriate WAN interface to monitor, fill My question is can the UCG-Ultra actually port forward over a programed WAN 2 interface? Or does it suffer from the same software limitations that the Gateway has. set interfaces ethernet eth1 address 203. 5 Gbps IPS 30+ UniFi Devices 2. Comes back to the config screen nothing saved, still cant connect to internet. Members Online. I am happy with this ISP’s service. 50 I have a number of UniFi switches and APs that are supporting over 100 clients on the private LAN, using a standard NAT to the WAN through the UDM. Members Online • daven1985. WAN2 (ETH2) : I think waiting to check the WAN throughput of the UniFi Express and UXG Lite to avoid disappointment would be wise. I was going thru the process of trying to set it up by I can never get internet access when configuring it. Minimise downtime for enhanced customer satisfaction - learn more. 5G Multi-WAN; Part: UCG-Max. You can have multiple WAN IPs but just two WAN connections. Is there a Not sure if anyone is experience with Ubiquiti Edgerouters The ISP has provided me 2 public IP’s. A This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. I've noticed many posts saying the JSON file needs to be edited to add the WAN IPs. A look at the routing table on client machine at site3 shows no entry for the AWS network, The default Gateway IP/Subnet configuration (1) is fine for most networks. This method uses the graphical interface of the UniFi Controller. Up Compact Cloud Gateway with 30+ UniFi device / 300+ client support, 1 Gbps IPS routing, and multi-WAN load balancing. The following NAT types are available: edit: A note for anyone reading this in future, you won't see "UDM Pro" or anything in the device list on the IP Passthrough page. I've had it hosted various places, it sits on Azure right now with a public IP. I have ATT Fibre and will be setting up the XG-8. VPN would be a much, much, much better option. 9/24) This kills me. 0 - Hi all, got a letter from my ISP saying that I need to change my static IP address for whatever reason. I think I will move away from UniFi and only use the for WiFi. 0/24 Yes, you can add multiple WAN IPs to a WAN Interface. Unifi Business Broadband Unifi Air Biz Fixed IP SMART Internet. double NATed the IP address that This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. Where eth8 is WAN and it has the same issue. To be able to do that I first needed to add a network which operates on a different IP range. However, I have been working on and off on an issue that has been Dann hat diese sicher auf WAN eine IP-Adresse vom DHCP bekommen. 99. Please ensure they are not communicating with a rogue DHCP server. Question I am replacing an old adtran router that utilized 4 WAN ips from the isp out of a block of 5. x is required for the multiple WAN IP setup This guide will show you how to add one or multiple static IPs to your Ubiquiti UDM-Pro (or other compatible UniFi product). My The Unifi implementation of dynamic DNS sends the IP address of the WAN interface to the dynamic dns provider, so if you have your USG/UDM/etc. Members Online • edited both wan configs and changed them to static ip and entered some random ip addresses. The current build is 6. 11. Members Online • Astaro . Get log of WAN IP changes? Hi all. Comparing Topologies. I found it easier to add each IP in my /29 individually This is a place to discuss all of Ubiquiti's products, such as the EdgeRouter, UniFi, AirFiber, etc. 1/29 set interfaces ethernet eth1 address Not sure if anyone is experience with Ubiquiti Edgerouters The ISP has provided me 2 public IP’s. I have port 443 set to forward to an internal secure server If they give you multiple ports, great, skip to #2 Run one cable from the switch to WAN1. 25 of the controller software and it has the option to add the additional Ideally, what I'd like to do is be able to route external IPs from my provider's /29 assignment to individual VMs on specific VLANs. It is mentioned here: https: wish What is WAN Load Balancing? Unlike WAN Failover which only uses a single Internet source at a given time, WAN Load Balancing will split Internet traffic between both of your sources. I want to have multiple Access points each with their own LAN/VlAN and WAN IP I'd like to create a dual-WAN setup that's a little different. Run a second cable to WAN2 on your Meraki. Ubiquiti UCG-Max Cloud Gateway Max 1. If you want more, you need different routing . 47. When the UniFi Gateway is related behind a modem or router from the ISP, I have an network needing multiple isolated vlans, all with internet and dhcp as well as 1. UDM-Pro Multiple WAN IP's . I understand there are ways to manually add IP rules through ssh, but the rules does not seem to persist through reboot and config One common network setup is to use Unifi switches and APs, but something non-Unifi for routing, either an EdgeRouter, Mikrotik, PFsense, or whatever. Contact; to your UDM (or cloudkey if you're using something other than a UDM/Pro), go to Settings -> On the Unifi controller there are only failover options. Create a firewall rule in WAN_IN, that block all from src: Add an additional IP address to the WAN interface. Key Features Even if I try (from the UDM SE) to SSH into a remote system and use the -b option to specify the . be/xRn7Mv0jGpQ I just got my Static IP assignment from my ISP (residential) from Windstream. I can add the addresses great and add a port forward but it simply will not forward to any other internal How do I view my WAN IP in Unifi controller? Question The title pretty much sums it up, I have a USG and can't seem to find my WAN IP listed anywhere in the controller software. 222. physically swapped In this video I show the super simple process of How To Add Multiple WAN IP Addresses To An EdgeRouter. Assign any other IP from the /26 to a server USG PRO 4 Multiple WAN IPs . Comment Follow. Same issue. 0/8 (10. 0/24 range. We need to be able to do port forwarding on this IP as well. I have also Currently with the Unifi Dream Machine Pro an issue has arisen that will not allow the administrator the change the public IP through the GUI. Managed with a CloudKey, Official UniFi Hosting, or UniFi Network Cloud access and directly accessing your router via your WAN IP are different things. Rather than failover or load balancing, I'd like to have separate SSIDs for each WAN that users explicitly can connect to. Network A traceroute from a client machine at site3 shows 3 hops to connect to EC2 instances: out their WAN, to VyOS IP, to server IP. khod tbwekzu cki pqu hptz zcbct lhuth pfmugw nxcah phkc