This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bit of advice about NAT

JR1973 over 10 years ago

Hi,

We have an internal Acronis Access server that users access on both desktop and mobile devices.

Mobile users access files via a "Gateway server" on port 443, desktop users access files via an "Access server" on port 3000

We have given the gateway server a public IP "215.142.x.x", the access server is on an internal IP, we have created a DNAT rule that points external users to the internal IP of the server, everything works fine apart from mobile users attempting to access files whilst on our internal WLAN, they receive a message saying "Error obtaining server info for server 215.142.x.x", internal desktop users are able to access the system fine.

My question is should we have created a full NAT rule, and if so do how do we point to all internal LAN networks in a similar way we use wildcard masks?, our internal WLANs are across multiple areas of our premises and network addresses range from 192.168.2.0/24 - 192.168.239.0/24.

Thank you all in advance

This thread was automatically locked due to age.

0 Scott_Klassen over 10 years ago

In order to access one of your own WAN IPs from an internal network you would need a Full NAT as you surmise. https://www.sophos.com/en-us/support/knowledgebase/115191.aspx. Alternately, you can give the gateway server an internal IP, DNAT external traffic to 215.142.x.x (set as an additional address on the UTM) to it, then, assuming access is via FQDN, use split-brain DNS so that internal users are directed to the internal IP.
Cancel
Vote Up 0 Vote Down

Cancel