Guest network on separate public IP

Hello,

Are you looking to NAT the traffic via NAT, if so review below:

docs.sophos.com/.../index.html

Thanks Mayur, how do I specify the alias IP as the Translated source (rather than MASQ)? Also, would I still need an SD-WAN rule to restrict the traffic to that WAN port?

Hello,

Since you have already added alias for the new subnet and I believe it must be routable by the service provider. You can create the host with the alias IP and applies it to the NAT policy associated with the Guest user firewall rule or network.

SDWAN routes will be required if you wanted to route the traffic via specific gateway where in you may select the source network as your Guest Network and route it via actual service provider and it will route the traffic with the alias IP added in NAT policy.

Hello,

Since you have already added alias for the new subnet and I believe it must be routable by the service provider. You can create the host with the alias IP and applies it to the NAT policy associated with the Guest user firewall rule or network.

SDWAN routes will be required if you wanted to route the traffic via specific gateway where in you may select the source network as your Guest Network and route it via actual service provider and it will route the traffic with the alias IP added in NAT policy.

Perfect thanks for your help! Shame you have to create a new host rather than use the system host created by the alias - just have to remember to update in two places if the IP changes.