Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 38 subscribers
  • Views 367 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Frage zu DNAT

User12345_01
Hallo NG,

Folgendes Szenario:

Internet-Zugang mit eigenem öffentlichen Subnetz (z.B. 100.100.100.0/24)
     :
     :
ASG V8.3 ........... Site2Site zu einer anderen ASG
     :                                           :
Privates Netz                        Privates Netz   ......  Server1

So in etwa.
Jetzt meine Frage:
Kann ich Server1 über den Tunnel auf der anderen ASG per DNAT freigeben?

Han schon ein paar Sachen probiert aber bis jetzt hat es nicht geklappt.
Ach so ja, Tunnelverbindung steht auf any.

Vielen Dank 

Gruß


This thread was automatically locked due to age.
Parents
  • 0
    Ja, aber nur mit Full NAT:

    Traffic Source:  Any 
    Traffic Service: ???
    Traffic Destination: External [Server1] (Address)

    NAT mode: Full NAT

    Destination: Server1
    Destination Service: {leer lassen}

    Source:  Internal (Address) 
    Source Service: {leer lassen}

    Automatic Firewall rule: {geklickt}



    Ach so ja, Tunnelverbindung steht auf any.

    Das ist hier nicht wichtig.

    MfG - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Ja, aber nur mit Full NAT:

    Traffic Source:  Any 
    Traffic Service: ???
    Traffic Destination: External [Server1] (Address)

    NAT mode: Full NAT

    Destination: Server1
    Destination Service: {leer lassen}

    Source:  Internal (Address) 
    Source Service: {leer lassen}

    Automatic Firewall rule: {geklickt}



    Ach so ja, Tunnelverbindung steht auf any.

    Das ist hier nicht wichtig.

    MfG - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML