This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using UTM as a NAT Gateway (AWS)

Hi,

I'm looking to use a Sophos UTM as I do on my on-premise site, in AWS. I want to start by replacing both my OpenVPN server and Basic iptables NAT Gateway. With the hope of using it for more in the future.

The only rule i have in iptables is masquerade all to eth1.

I have a Private/Public VPC, in which i've dropped the UTM in the public subnet, in which the 0.0.0.0/0 route goes to Amazon's internet gateway (IGW).

At the moment, my private routing table has the route 0.0.0.0/0 -> Interface of iptables NAT Instance. I have swapped that for the interface of the UTM, but that doesn't work yet - so i switched back.

I've tried adding a NAT Masquerade rule but that doesn't work from eth1 (internal only IP) to eth0 (internal IP but has public elastic ip).

To me it seems i need two interfaces, one that only has a private IP, and another that has a public and Masquerade private eth1 -> eth0. But i can't even get that to work. 

Does anyone have some basic steps/help to get a UTM setup as a route/outbound nat gateway in AWS?

I can't find on the internet a solid guide on what I want to do.

The VPC is a /16 CIDR block, the private Interface below is in a private subnet attached to the private routing table (/28 CIDR). The public interface below is in a public subnet attached to the public routing table (another /28 CIDR).

Cheers

 



This thread was automatically locked due to age.
Parents
  • Hi Lloyd and welcome to the UTM Community!

    A picture of your NAT rule would help.  I'm afraid that describing your iptables configuration isn't enough to help us understand what you want to do.

    Should a moderator move this thread to the UTM on AWS forum?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hi Lloyd and welcome to the UTM Community!

    A picture of your NAT rule would help.  I'm afraid that describing your iptables configuration isn't enough to help us understand what you want to do.

    Should a moderator move this thread to the UTM on AWS forum?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data