topic NAT to server on DMZ? in General Topics

NAT to server on DMZ?

cradivonyk — Mon, 23 Jan 2012 19:15:57 GMT

I have a PA-500. Our public block of IP addresses come in on Ethernet1/1 (Untrust Zone). I have no trouble NAT'ing in an outside IP to an internal device that is physically connected to a network on Ethernet1/2 (Trust Zone). Now, I created a "dmz" on Ethernet 1/4 and I gave the interface the address of 10.4.1.1. I put a client on this network and I am able to connect to the internet just fine. I installed Apache on the client to see if I could NAT in to a device on the DMZ and I it is not working for me. I don't know what I am missing... any help?

Re: NAT to server on DMZ?

snisar — Tue, 24 Jan 2012 04:34:29 GMT

In your DMZ Inbound NAt rule, please replace "DMZ_Installs" with "Untrust" under destination zone. After commiting this change, your issue should be resolved, please let me know.

-snisar

Re: NAT to server on DMZ?

ncampagna — Tue, 31 Jan 2012 21:23:12 GMT

To add a bit of explanation... the destination zone in NAT policy is the zone that the destination IP address is in before performing NAT. So in your case, it is your public IP address on Ethernet1/1 (Untrust zone).

Thanks,
Nick Campagna