UTM9 - VLAN mode

I think this is the first time I'v ever  seen the need to link a host objet to an interface.

You should use 2 fake IPs and DNAT them to the host objects.

There is always the first time for everything when you work in customer service :)

The issue rises because i have 10 customers that they use each one of them a total of 10 different devices that they work together to create a system. The developers set this up as each device in a system to have the same IP. E.g. each load balancer should have IP 192.168.0.10, each physical server to have an IP 192.168.0.3 etc. etc.

So I end up having 10 systems that they have 20 devices from which they all use the same range and same IP address.

What i was looking for is to perhaps create virtual IP address for each VLAN that represents each network.

How do i set up your idea? 

With an 1.1 dnat from  a fake network to any of the play-1.xx networks you shout be able to access what you want

Thanks, even though i am not entirely sure how this is going to work. Since i don't have yet the 310s in place, i am using an appliance to do the configuration.

Here is what i did:

1. Interfaces
   1. Create interface per vlan using the same hardware
2. Network definitions
   1. Create network definition where IPv4 is 192.168.0.0 and interface each of the previously created interfaces
   2. Repeat as above for each vlan
   3. create network hosts and bound them to each interface respectively
3. NAT
   1. Masquerading
      1. Create a new rule from each network using interface internet (so they can get to the internet

I am not entirely sure why should i create 1:1 NAT nor what i will achieve with this. I was thinking that for access to each device from the internet, i shall create a normal DNAT rule where traffic from is any, service as appropriate, going to internet address, should change destination to the ip address of the host. Sophos should know where to find it since when i created the host, i bounded to a specific adapter.

Right?

Thanks, even though i am not entirely sure how this is going to work. Since i don't have yet the 310s in place, i am using an appliance to do the configuration.

Here is what i did:

1. Interfaces
   1. Create interface per vlan using the same hardware
2. Network definitions
   1. Create network definition where IPv4 is 192.168.0.0 and interface each of the previously created interfaces
   2. Repeat as above for each vlan
   3. create network hosts and bound them to each interface respectively
3. NAT
   1. Masquerading
      1. Create a new rule from each network using interface internet (so they can get to the internet

I am not entirely sure why should i create 1:1 NAT nor what i will achieve with this. I was thinking that for access to each device from the internet, i shall create a normal DNAT rule where traffic from is any, service as appropriate, going to internet address, should change destination to the ip address of the host. Sophos should know where to find it since when i created the host, i bounded to a specific adapter.

Right?