NAT in RED Device

Hi, Kris, and welcome to the UTM Community!

I'm tempted to just give you an answer to your question, but there might be a better solution...

1. Is the UTM at the edge of your network and does it have a public IP on its External interface?
2. Is the UTM the default gateway for the devices in your LAN?
3. How many LAN subnets do you have on how many defined Interfaces?
4. Is there another router inside your location?
5. Will the RED subnet only access devices in your LAN(s) or is the RED in "Standard/Unified" mode?

Cheers - Bob

Hi Bob,

See answers below in red text.

Is the UTM at the edge of your network and does it have a public IP on its External interface?

The UTM has a public IP on its interface. The UTM will be on the second layer of the setup

Is the UTM the default gateway for the devices in your LAN?

No. Default gateway of the devices is the core switch and will be forwarded on the firewall on top of the UTM

How many LAN subnets do you have on how many defined Interfaces?

/23 in one interface

Is there another router inside your location?

Yes. A Firewall on top of the UTM

Will the RED subnet only access devices in your LAN(s) or is the RED in "Standard/Unified" mode?

The RED is in Standard/Split mode.

 Thanks,

Kris

Thanks, Kris.  I don't see any need to NAT traffic from the RED subnet into your LAN as long as your core switch routes all non-LAN traffic to the UTM.  Plus, if the only traffic in the RED tunnel is for your LAN, then there's no need for a masq rule on the External interface.

Cheers - Bob

Thanks, Kris.  I don't see any need to NAT traffic from the RED subnet into your LAN as long as your core switch routes all non-LAN traffic to the UTM.  Plus, if the only traffic in the RED tunnel is for your LAN, then there's no need for a masq rule on the External interface.

Cheers - Bob