This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NAT Web Server under MPLS

RobertoCandelu over 6 years ago

Good Morning,

i have cluster UTM SG310 with firmware version 9.509-3

WAN IP IS: 1.2.3.4

Additional Address: 1.2.3.5

Internal LAN: 192.168.0.100

MPLS Gateway: 192.168.0.15

Web Server: 192.168.5.19 (Under MPLS)

Static Routing configured on UTM: Route Type: Gateway Route - Network: 192.168.5.0/24 - Gateway: 192.168.0.15

I want to publish my web server outsite with Additional address. So i created the DNAT:

Traffic From: Any

Using Service: HTTP

Going to: 1.2.3.5

Change Destination: 192.168.5.19

Automatic Firewall Rule

I'm not able to reach my web server from outside.

Can somebody help me to understand why?

Thank you so much.

Regards.

This thread was automatically locked due to age.

0 JosefBergmann over 6 years ago

Did your Web Server (192.168.5.19) route back his internettraffic to your UTM?

bye Josef

BERGMANN engineering & consulting GmbH, Wien/Austria
Cancel
Vote Up 0 Vote Down

Cancel
0 RobertoCandelu over 6 years ago in reply to JosefBergmann

Hello,

yes my web server route internet traffic trought mpls gateway (192.168.5.1)

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 6 years ago in reply to RobertoCandelu

Hi Roberto,

has the MPLS Gateway a default gateway that points to the UTM?

If not, you need a "Full NAT" to make it working.

Regards mod
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to RobertoCandelu

Ciao Roberto and welcome to the UTM Community!

As mod says, you need a Full NAT instead of a DNAT. The reason is similar to Accessing Internal or DMZ Webserver from Internal Network.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 RobertoCandelu over 6 years ago in reply to mod2402

Hello mod,

i created a FULL NAT and i confirm you that now is working.

I put my UTM Internal Address (192.168.0.100) on the "change the source to:" field

Thank you so much for your support.

Regards.
Cancel
Vote Up 0 Vote Down

Cancel
0 RobertoCandelu over 6 years ago in reply to BAlfson

Thank you so much for your support. I confirm you now is working.

Regards
Cancel
Vote Up 0 Vote Down

Cancel