Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 433 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pls advice on DNAT

ravindharan
Hi Team,

I use ASG version 8.0 Home edition. I have created DMZ zone and host a webserver by created DNAT as given below and able to access my web server from external network with out any issue.

External (WAN) (Network) XX.XX.XX.32/29
External (WAN) (Address) XX.XX.XX.34  of my ASG V8 Home edition  

DNAT Rule.
traffic source: any
traffic service: 443 or 80
traffic destination: XX.XX.XX.34 
nat mode: dnat

Destination: internal Server

However, I am unable to access my web server from external network. If by assigning an (exclusive) additional one IP address to ASG external (WAN) Interface i.e XX.XX.XX.35 for “WEB SERVER” and more over I am unable to see any external IP address trace logs capture in ASG packet filter live log. 

Example 

DNAT Rule.
traffic source: any
traffic service: 443 or 80
traffic destination: XX.XX.XX.35

nat mode: dnat
Destination: your internal Server

If I change the traffic destination address to XX.XX.XX.34 ASG External (WAN) Address, I can able to access my web server from external network.
Please advice how to overcome this issue.


This thread was automatically locked due to age.
  • 0
    In the traffic selector portion of the DNAT, you must use the (Address) object created when you defined the interface:

    Traffic source: Any
    Traffic service: HTTP/S
    Traffic destination: External (Address)


    It won't work if you use a host definition with the IP of "External (Address)". 

    Cheers - Bob