About JamesHamilton

Afternoon all!   I'm sure this is easy on our PA850 firewall but I can't figure it out.   Interface setup ethernet1/1 - Internal networks - Zone LAN ethernet1/5 - Primary internet line with /27 IP range - Zone WAN ethernet1/6 - Secondary internet line with /29 IP range - Zone WAN A single virtual router for all interfaces   I need to have outbound internet access from 4 internal IP addresses destined for one specific internet IP to use a specific physical WAN interface (ethernet 1/6) and associated static IP address. Our default outbound interface, associated IP address and NAT rule is currently on ethernet1/5.   The aim is to dedicate the entire bandwidth of the WAN link on ethernet1/6 for replication traffic out to this one specific address, only from these 4 internal servers.   I thought I had sussed it by just setting up an outbound NAT rule (above our default outbound NAT rule) as follows:   Original Packet Source zone - LAN Destination Zone - WAN Destination Interface - any Source Address - The 4 internal IP addresses Destination Address - Specific internet IP address Service - any Translated Packet Source Translation - dynamic-ip-and-port, ethernet1/6 and required static IP Destination Translation - none When looking at the Session Monitor I can see the translation works and that the static IP address is in fact a WAN IP assigned to ethernet1/6 but that the egress interface is still ethernet1/5. Strangely the traffic still works but its obviously using massive bandwidth on the wrong interface?   Any bright ideas or am I missing something obvious with static routes on the default virtual router?   Thanks! ... View more