This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.111 & 9.203] cannot create DNAT with ANY or Internet as Dest

Hi,

Tested on 9.111 and 9.203--

I'm having trouble with DNS using my iPad and the Cisco VPN client with the UTM; I'm trying to implement Bob's workaround:
DNAT : VPN Pool (Cisco) -> DNS -> Any : to Internal DNS

but the UTM fails with

"The NAT rule object cannot use any address objects for the traffic destination attribute when using this NAT mode."

and the "Going to:" box is RED with ANY or Internet IPv4 filled in.

I need to get the VPN working ASAP as I'm going to China where SSL VPNs are now blocked.

See also
https://community.sophos.com/products/unified-threat-management/astaroorg/f/58/t/55110

Thanks,
Barry

This thread was automatically locked due to age.

0 mle over 11 years ago

Please show a screenshot of the DNAT rule you're trying to create.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,

Screenshot attached from 9.111 (9.2 behaves identically)

When I click 'Save', the "Going To:" box flashes red, and the red error message appears.

Thank you,
Barry
- dnat-dns.png
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 pedja over 11 years ago in reply to BarryG

Hi,

Just out of curiosity, why would you implement such NAT rule.
Cancel
Vote Up 0 Vote Down

Cancel
0 pedja over 11 years ago

Hi,

The issue has been resolved.

1. Create a group where IPv4 and/or IPv6 are members of it, name it whatever you want.
2. Create the NAT rule as source: VPN (Cisco), Prot: DNS, Destination: new group, Translate: Interface.

(apologies for big images, noob mac user [:)] ).

http://imgur.com/UFdKR7Q.png
http://imgur.com/kcftN25.png

HTH.

P.
Cancel
Vote Up 0 Vote Down

Cancel