This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Full NAT or 1 to 1 NAT

I can't find any documentation on Full NAT or 1 to 1 NAT. I'm coming from the Cisco Router/ASA/Pix world so I don't know all the Astaro terms. I want to use Astaro as an ASA replacement at my office.

I have and Exchange server on my local network and I want to do a 1 to 1 NAT. I want to statically map an internal private IP with a Extra Public IP in my Range. I want the translation to go both ways.

Astaro WAN IP = 24.***.***.162

Public IP = 24.***.***.163
Exchange IP = 192.168.1.2

I want all traffic going inbound 24.***.***.163 to be mapped to 192.168.1.2

I also want all exchange (192.168.1.2) traffic outbound to show 24.***.***.163

In the Cisco world and most firewall manufacturers this is called 1 to 1 NAT

I've tried DNAT and SNAT. I can get inbound working but I cannot get outbound to show the correct IP address (24.***.***.163)

Any help would be greatly appreciated.

Justin

This thread was automatically locked due to age.

Parents

0 BAlfson over 13 years ago

Hey, Justin, welcome to the User BB!

You need both a DNAT and an SNAT. Normally, we configure our clients' Astaros with their primary MX record set to the FQDN that resolves to the primary IP on their External interface. More importantly, we assign mail.domain.com as the hostname of the Astaro.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 fintech over 13 years ago in reply to BAlfson

I tried a SNAT but it would not show the correct address. It still shows the firewall WAN IP.

I followed the directions from this site.

Astaro Security Gateway – SNAT, DNAT, 1-to-1 NAT and Full NAT – HowTo » The time I've wasted on technology...
Cancel
Vote Up 0 Vote Down

Cancel
0 fintech over 13 years ago in reply to fintech

Here is a picture of what I have below. The example I have below is my domain controller that I need to have 1 to 1 NAT. The VPN feature is very nice with this Astaro. I was able get the site to site VPN with my home ASA 5505 up in a few minutes.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 fintech over 13 years ago in reply to fintech

Here is a picture of what I have below. The example I have below is my domain controller that I need to have 1 to 1 NAT. The VPN feature is very nice with this Astaro. I was able get the site to site VPN with my home ASA 5505 up in a few minutes.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data