PPPOE with Framed route

Hi Marco Camacho2: If you would like to do NAT with another Public IP rather than Interface IP for the firewall-generated traffic then please try applying the system-generated NAT and confirm how it goes. It should work.

Sophos Firewall: NAT the generated traffic

support.sophos.com/.../KB-000035607

Hi Vishal_R

I will try this but in the CLI "set advanced-firewall sys-traffic-nat add destination <destination IP address> snatip <SNAT IP address> " Do I set destination IP as 0.0.0.0/0?

E.g set advanced-firewall sys-traffic-nat add destination 0.0.0.0/0 snatip 1.1.1.1 

Hi Marco Camacho2: For testing, try it for 1 or 2 IP like 8.8.8.8 to see the PING to such IP works fine and when it is forwarding request out taking the correct NAT IP as per your requirement, and if that is successful then you may put 0.0.0.0 as well but with Interface condition. So whenever traffic is out via that Interface then in that scenario only that system NAT will be applied. So if you have multiple ISP then the Interface based command will be a more appropriate option as per the below example.

Example:

console> set advanced-firewall sys-traffic-nat add destination 8.8.8.8 interface PortX snatip x.x.x.x

Hi Marco Camacho2: For testing, try it for 1 or 2 IP like 8.8.8.8 to see the PING to such IP works fine and when it is forwarding request out taking the correct NAT IP as per your requirement, and if that is successful then you may put 0.0.0.0 as well but with Interface condition. So whenever traffic is out via that Interface then in that scenario only that system NAT will be applied. So if you have multiple ISP then the Interface based command will be a more appropriate option as per the below example.

Example:

console> set advanced-firewall sys-traffic-nat add destination 8.8.8.8 interface PortX snatip x.x.x.x

Thanks. There is only 1 ISP but I will apply to interface as described

So I applied the command and can't ping 8.8.8.8.

I'm going to ask for a public IP and frame root the /29 via that.

Hi Marco Camacho2: To revert the command syntax would be the same and in place of add you may use the keyword del.

Done before you posted but thanks anyway.