Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

Hi again One more question, how to do NAT in sonicwall firewall?

Actually we have a Lease Line with one WAN ip and 5 LAN ips, how to do NAT configuration to given 5 LAN ips to my internal private ips?


for ex:

my WAN ip is - 1xx.xx.xxx.xx /30- (a)

Given LAN ips are 1xx.xx.xx.xx0/29 to 1xx.xx.xx.xx4/29 (b)

I wanted to do NAT configure as my internal private ip like 192.xxx.x.xx0 to 1xx.xx.xx.xx0/29 (c)

So that we can access even internally as well as externally...

Category: Entry Level Firewalls
Reply
Tagged:

Answers

  • MitatOngeMitatOnge All-Knowing Sage ✭✭✭✭

    hello @Manoj ,

    Can you clearfy network topology with viso design ?

    If I'm not mistake. You have LL router and there are 2 interfaces and behind the router located sonicwall fw?

    <--Wan IP 1.x.x.x/30 eth0 -->LL ROUTER<-- Lan ip eth1 1xx.xx.xx.xx0/29 to 1xx.xx.xx.xx4/29 --> <--X1 Sonciwall FW X0 --> 192.xxx.x.xx0 to 1xx.xx.xx.xx0/29

  • ArkwrightArkwright Community Legend ✭✭✭✭✭

    Assuming your provider is routing this /29 to your "1xx.xx.xxx.xx /30" IP address, then create an address object for the public IP of choice and use it in a NAT policy.

    If you use the /29 just for NATing rather than routing then you actually have 8 IPs to work with, not 5.

  • ManojManoj Newbie ✭

    Hi all,

    Thank you for the response, I just figured it out.

    We have one WAN IP from one of the ISPs -------- (A)

    Five LAN executable IPs from ISP -----------------(B)

    Our internal Private IP ------------------------------(C)


    What I did is I configured

    single WAN IP from ISP as a WAN in our firewall --- (A)

    added address objects Five executable LAN Ips from ISP --(B)

    added address objects my private IP ------------------------(C)

    Configured NAT policies as below,

    1st Original to Translated ----

    any to any

    (B) to (C)

    service - original

    any any

    2nd Original to Translated

    any to any

    (A) to (B)

    service - original

    any to any



    Now that it, it's communicating even from outside the network with a single WAN IP with distributed executable LAN IPs


    hope it will be helpful for others too.

  • ArkwrightArkwright Community Legend ✭✭✭✭✭

    Just to reiterate, you have 8 public IPs, not 5.

  • ManojManoj Newbie ✭

    Yes... Okies ..Thanks ..

Sign In or Register to comment.