summit_pcguy
asked on
Need to forward multiple Public IP addresses with SonicWall TZ100
I have a Sonicwall TZ100 (enhanced OS) and a cable modem. I have two IP addreses. The main IP address is assigned to the WAN interface of the SonicWall and forwards port 443 to my Outlook Web Access Server.
I have a LOB application that also needs to use port 443 (SSL). What I want to do is to use my second IP to forward TCP 443 to the server with the LOB app. I know this can be done as is is described in "https://www.experts-exchange.com/questions/23102558/Multiple-WAN-IPs-on-Sonicwall-firewall.html?sfQueryTermInfo=1+address+forward+how+ip+multipl+port+public+sonicwal+us"
and
https://www.experts-exchange.com/questions/23102558/Multiple-WAN-IPs-on-Sonicwall-firewall.html?sfQueryTermInfo=1+address+forward+how+ip+multipl+port+public+sonicwal+us.
The second link seems to be the answer. I have ran the wizard and looked as best as I can at the actions described and everything looks correct - I am not able to connect from outside using this ip. I have verified that I can access the site from within the local subnet so I know the website is up.
Please assist.
Thank you.
I have a LOB application that also needs to use port 443 (SSL). What I want to do is to use my second IP to forward TCP 443 to the server with the LOB app. I know this can be done as is is described in "https://www.experts-exchange.com/questions/23102558/Multiple-WAN-IPs-on-Sonicwall-firewall.html?sfQueryTermInfo=1+address+forward+how+ip+multipl+port+public+sonicwal+us"
and
https://www.experts-exchange.com/questions/23102558/Multiple-WAN-IPs-on-Sonicwall-firewall.html?sfQueryTermInfo=1+address+forward+how+ip+multipl+port+public+sonicwal+us.
The second link seems to be the answer. I have ran the wizard and looked as best as I can at the actions described and everything looks correct - I am not able to connect from outside using this ip. I have verified that I can access the site from within the local subnet so I know the website is up.
Please assist.
Thank you.
n7okn
On the TZ170, you can put the WAN interface in passthrough mode, so that one IP address goes to one device on the LAN and the other goes to the other. You give up the ability for your LAN to have a private address. All the firewall rules still work, and you can only see the actual TZ170 from the DMZ. It's tricky to set up, and I remember it didn't like to accept the commands, but once it did, it worked great. You can also set the WAN interface for one of the IP addresses, and specify the other addresses (range of IP addresses) to appear at the DMZ port. Let me know if you'd like help setting this up. I might have to re-scratch my head over this, but I think I can recreate it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks! That worked!