This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Need to route an external IP

Hi there,

I try to explain my need I have.

First of all, I have an ASG220 with the Firmware 7.405.

What I need to do is, to grant access from an external IP to an internal specific IP address.

Exemple:

AAA.AAA.AAA.AAA is the external IP
BBB.BBB.BBB.BBB is our public (visible) IP address
CCC.CCC.CCC.CCC is the target internal IP address to reach.

How can I configure this, that the person from the A IP address can open a remote session on the C IP address?

I hope that I was clear enough and sorry if this thread already exist.


Thanks in advance

NoSiL


This thread was automatically locked due to age.
Parents
  • Please show the definition of CAM_Survey.

    In the DNAT pictures, you blacked out the names.  I can understand concealing the 'Destination', but I would have expected the 'Traffic Source' to be "Any" instead of something specific.

    When you don't change the Service, you should leave 'Destination Service' empty.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Please show the definition of CAM_Survey.

    In the DNAT pictures, you blacked out the names.  I can understand concealing the 'Destination', but I would have expected the 'Traffic Source' to be "Any" instead of something specific.

    When you don't change the Service, you should leave 'Destination Service' empty.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Here the Cam_Survey definition:

    Cam_Survey

    For security reason, I prefer define the traffic source with a specific Ip, that never will change, so it doesen't matter the "any".

    I will test the empty field for "Destination Service".
  • Hi Nosil,

    I noticed the corresponding DNAT rule being on position "5".
    What about the first four rules? Any overlap?

    Same with the packet filter: Could you post a screenshot of your packet filter config?

    Regards,
    Thomas
  • Hi guys...

    Sorry for the delay.

    I found the problem. I've bound one network to the wan instead of the lan.

    I changed this and now everything is working now.

    Thanks a lot for your help. [:)]

    Have a nice day.

    NoSiL