Hi again One more question, how to do NAT in sonicwall firewall?

Manoj

Actually we have a Lease Line with one WAN ip and 5 LAN ips, how to do NAT configuration to given 5 LAN ips to my internal private ips?

for ex:

my WAN ip is - 1xx.xx.xxx.xx /30- (a)

Given LAN ips are 1xx.xx.xx.xx0/29 to 1xx.xx.xx.xx4/29 (b)

I wanted to do NAT configure as my internal private ip like 192.xxx.x.xx0 to 1xx.xx.xx.xx0/29 (c)

So that we can access even internally as well as externally...

MitatOnge

hello @Manoj ,

Can you clearfy network topology with viso design ?

If I'm not mistake. You have LL router and there are 2 interfaces and behind the router located sonicwall fw?

<--Wan IP 1.x.x.x/30 eth0 -->LL ROUTER<-- Lan ip eth1 1xx.xx.xx.xx0/29 to 1xx.xx.xx.xx4/29 --> <--X1 Sonciwall FW X0 --> 192.xxx.x.xx0 to 1xx.xx.xx.xx0/29

Arkwright

Assuming your provider is routing this /29 to your "1xx.xx.xxx.xx /30" IP address, then create an address object for the public IP of choice and use it in a NAT policy.

If you use the /29 just for NATing rather than routing then you actually have 8 IPs to work with, not 5.

Manoj

Hi all,

Thank you for the response, I just figured it out.

We have one WAN IP from one of the ISPs -------- (A)

Five LAN executable IPs from ISP -----------------(B)

Our internal Private IP ------------------------------(C)

What I did is I configured

single WAN IP from ISP as a WAN in our firewall --- (A)

added address objects Five executable LAN Ips from ISP --(B)

added address objects my private IP ------------------------(C)

Configured NAT policies as below,

1st Original to Translated ----

any to any

(B) to (C)

service - original

any any

2nd Original to Translated

any to any

(A) to (B)

service - original

any to any

Now that it, it's communicating even from outside the network with a single WAN IP with distributed executable LAN IPs

hope it will be helpful for others too.

Arkwright

Just to reiterate, you have 8 public IPs, not 5.

Manoj

Yes... Okies ..Thanks ..