topic Re: Overload and Fixed IP Nat rule in General Topics

Overload and Fixed IP Nat rule

nettobe — Mon, 08 Aug 2011 14:55:58 GMT

Hello, i am trying to do somehting that hosuld be very simple and straight forward but for some reasons, its not working.

My customer has two internet connections : ADSL and IP-SHDSL used as below :

ADSL router used for all browsing (from all users ) -copnnected to ethernet 1/1

IP-SHDSL Router used only for Fixed IP services :- Exchange Server and SQL Server - connected to ethernet 1/4

Exchange has a public IP of 197.227.1.121 and internal IP of 172.16.2.3

SQL Has a Public IP of 197.227.1.124 and internal IP of 172.16.2.13

I am trying to configure the PA-500 so that all users go out to internet via the ADSL connection (workign wonderfully)

But I want traffic from the Exchange and the SQL to go out to internet via the IP-SHDSL with their public IP address, this part is not working at all.

any ideas out there ?

regards,

Re: Overload and Fixed IP Nat rule

lardsa — Mon, 08 Aug 2011 15:01:24 GMT

Policy Base Forwarding rules are there for that

Rule 1: Exchange server to internet will exit on SDSL interface

Rule 2: Exchange server to internet will exit on SDSL interface

Rule 3: all other traffic to internet will exit on cheap internet line

Re: Overload and Fixed IP Nat rule

nettobe — Mon, 08 Aug 2011 15:09:24 GMT

Have tried that, but not working...

Re: Overload and Fixed IP Nat rule

lardsa — Mon, 08 Aug 2011 15:16:44 GMT

Did you also create bi-directional NAT rules for SQL and mail server?

You should post a screenshot of your filetring rules, PBF, NAT and network interfaces. I have some use case with 3 internet lines and no problem....

Re: Overload and Fixed IP Nat rule

nettobe — Mon, 08 Aug 2011 16:58:30 GMT

See attached configuration snapshot.

Re: Overload and Fixed IP Nat rule

migration — Mon, 08 Aug 2011 17:58:27 GMT

Sorry, I had added this long comment then discovered you had set the rules to bi-directional.

Re: Overload and Fixed IP Nat rule

reaper — Tue, 09 Aug 2011 12:02:28 GMT

I noticed your PBF rules lack a next hop

You'll need this next hop IP to route your traffic out to the next router so it will be able to go out to the internet.

regards

Tom

Re: Overload and Fixed IP Nat rule

nettobe — Tue, 09 Aug 2011 12:07:05 GMT

I have corrected that give the IP address of the SDSL router, but still it does not go through.

i do a simple tracer from the Ex server to outside and i see that the trace hangs on reaching the PAN (172.16.2.1) after that it seems it can't get the route tight.

Re: Overload and Fixed IP Nat rule

nettobe — Tue, 09 Aug 2011 12:20:55 GMT

Uploading some new configuration so you can see exactly what I have and where i might have gone wrong.

regards,

Re: Overload and Fixed IP Nat rule

ukhapre — Tue, 09 Aug 2011 17:16:15 GMT

Hello, Please open a case with support if you continue to have problems and we can take a detailed look.

Thanks