NAT based on source port

It is possible, but appears to be very convoluted, I think I used the wrong process. Should be easier than what I tried.

Just wondering.. would it be possible at all?

Frank,

can you share what you have configured?

Thanks

Basically just this, but this only forwards any traffic inbound on 17478/udp.

I can't find how to do forward based on the source port.

Ok.

Did you check "Create eflexive rule" checkbox?

Yes, I did.. It gave me some unexpected results:

 It shows completly unrelated traffic to be allowed through now, yet I still can't connect to the application.

This is the rule:

Update 1: screenshot is the TCP rule, should've been the UDP one.

update2 : reflexive rule makes the app work.. but I still get those strange results..

Update 3: that was the Masqing turned on i think..

Yes: It was the masquereding being turned on.

Turned it off, Turned on the option to create a reflexive rule and it works.

Thanks guys! I appreciate the time you guys took to reply & help me out

Yes: It was the masquereding being turned on.

Turned it off, Turned on the option to create a reflexive rule and it works.

Thanks guys! I appreciate the time you guys took to reply & help me out

I am back.. IT still did not have the desired results..

As soon as I turn on the creation of Reflexive Rules, EVERYTHING goes through those reflexive rules and somehow gets dropped.

This includes Web Requests, DNS, and all Outbound traffic..

I tried to move these rules below the rules that handle all the traffic, include a "LAN > Any > Any = Drop"-rule, yet I still see entries in the log:

This shows traffic to the XG Webadmin + UserPortal. Both pages never load though, as if the traffic is dropped.

The same happens while opening google, or any webpage. Teamviewer on this machine can't connect either.

This is rule ID 45:

As soon as I turn off "create reflexive rule" everything works like normal, and the traffic gets handled by the right rules / policies

Which side initiates this secondary connection?

If it's the server inside the XG network,  just add add a user/network rule  , allowing this server to open udp connections to UDP destination port 17478 

I have a problems with nats not working on my network and may have to put my old sonicwall backup.

the is a router inside my XG Network

The hosting facility has a guy manages router 10.141.12.83 and 10.141.12.84 , the IP 10.141.12.86 is the virtual IP used in HSRP, I guess that all your traffic leaving the site points to that IP address. 

I have a static policy route using 10.141.12.86 as the gateway...is it really this easy?  just add add a user/network rule  , allowing this server to open udp connections to UDP destination port 17478 

Bro,

I would advice you to open a new thread as this one is already answered. Make to upload a network diagram otherwise we are not able to help you.

Regards