This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Switching internal traffic target to a new one

Hi all,

in cases of loosing connection to our SAP Router we had to change in every client the Router string to the new one, x.x.x.10 to x.x.x.13.

We've a filter rule for all SAP traffic to the old SAP Router IP. At the moment we changed the SAP Router object to the new IP. Is there a possibility to let the Astaro do this job - all traffic sended to .10 forwarding to .13? Maybe external users aren't able to change the SAP Logon entry or what ever.

I tried a DNAT rule but it wouldn't work:

traffic: lan -> SAP -> .10
destination: .13

Additionally, I also set a second SAP filter rule for the old SAP Router IP.

And, btw, we use for SAP traffic a gateway route entry.
-- 
Thanks for helping and kind regards,

Steffen


This thread was automatically locked due to age.
Parents
  • Please show a related "default drop" line from the full (not the Live) Firewall log.  Also, it might be interessting to see a picture of your DNAT.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Please show a related "default drop" line from the full (not the Live) Firewall log.  Also, it might be interessting to see a picture of your DNAT.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data