This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configuration of Nat

Idris Sanni over 5 years ago

I have an application server on my LAN and wanted it to be reached from outside the network.

I have configured all the policies and added to firewall rules, yet still not reachable.

I want to know if there are things I have done that am not supposed to do or that I have not done and meant to do?

These are my configurations

Source zone....... WAN

Allowed client NETWORK..... ANY

Destination host/NETWORK.... Created an Alias with the server Lan IP address

Services.... I created a TCP port to access the server

Protected server .... The server lan IP address

Mapped PORT....... TCP created above

Protected zone..... LAN

This thread was automatically locked due to age.

0 lferrara over 5 years ago

Idris,

Did you use this kb?
Cancel
Vote Up 0 Vote Down

Cancel
0 Idris Sanni over 5 years ago in reply to lferrara

I did but still could not access the server.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to Idris Sanni

Please share the rule.

Is the firewall enabled on the destination server? XG uses public ip or there is another router in front of it?
Cancel
Vote Up 0 Vote Down

Cancel
0 Idris Sanni over 5 years ago in reply to lferrara

Is the firewall enabled on the destination server? I will need to confirm this......

Yes XG uses public ip and there is no other router?

Aside from checking if the firewall is enabled on the router, I want to be sure if my configurations are correct.... I saw somewhere that in the destination host/network column, an Alias needs to be created which would be LAN IP address of the server while some said no alias rather it would be the WAN IP address of the interface.

Also some said I check the recursive box and some ignored.

Want to know the actual thing to do.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to Idris Sanni

Idris,

To dnat on a wan Alias:
Cancel
Vote Up 0 Vote Down

Cancel
0 Idris Sanni over 5 years ago in reply to lferrara

I have all these, just want to know if there is need to configure an Alias or not.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to Idris Sanni

Alias is needed only if you need to add additional ips (in the same subnet) on the same interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 Idris Sanni over 5 years ago in reply to lferrara

An inbound rule has been created on the server yet still can not access the internal server....

Please how do I troubleshoot.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to Idris Sanni

Idris,

Please post a tcpdump output from XG console:
Cancel
Vote Up 0 Vote Down

Cancel
0 Idris Sanni over 5 years ago in reply to lferrara

tcpdump to the WAN interface or where?
Cancel
Vote Up 0 Vote Down

Cancel