Nat Policy SonicWall TZ170

SonicWall TZ170
OS- Sonic OS Enhanced 2.1.02
Three zones on the firewall: WAN- 192.168.1.1, LAN- 172.16.1.1, OPT (DMZ)- 10.10.10.1

I am trying to set up a NAT policy from the DMZ to the LAN zone and back.  I want machine A (10.10.10.2) connected to the OPT port to look like it is coming from the LAN Port (172.16.1.1) when it contacts machine b (172.16.1.2) on the LAN using ssh.

[10.10.10.2] >>> [10.10.10.1 OPT-SONICWALL-LAN 172.16.1.1] >>> [172.16.1.2]

In the left margin I went to NETWORK>NAT POLICIES> ADD
Original Source: 10.10.10.2
Translated Source: 172.16.1.1
Original Destination:  10.10.10.1
Translated Destination: 172.16.1.2
Original Service: SSH
Translated Service: SSH
Inbound Interface: ANY
Outbound Interface: ANY

Original Source: 172.16.1.2
Translated Source: 10.10.10.1
Original Destination:  172.16.1.1
Translated Destination: 10.10.10.2
Original Service: SSH
Translated Service: SSH
Inbound Interface: ANY
Outbound Interface: ANY

It takes the policy without error and looks like it should work.

I also setup firewall rules to allow the traffic from the DMZ to the LAN.

I try to ssh from 10.10.10.2 to 172.16.1.2 and the outgoing packet makes it out of the SonicWall, but it has a source address of 10.10.10.2.   The sonicwall is simply passing the packet through and not changing the source address to 172.16.1.1.  So when 172.16.1.2 gets it it doesn't know what to do with it.  No matter what I try the packet passes through the SonicWall with out it being NATed to 172.16.1.1.

I'm looking for any suggestions on this.  I've tried everything I can think of.    
credogAsked:
Who is Participating?
 
KevinCovertConnect With a Mentor Commented:
Try using a translated IP that is not your gateway IP.  

orig        <<>> translated
10.x.x.2.<<>>172.x.x.3

172.x.x.2 <<>> 10.x.x.3

I would give that a shot first.
0
 
KevinCovertCommented:
How are you doing on this issue?
0
 
credogAuthor Commented:
Sorry it took so long to get back to this issue.  We decided to go another way, so I was unable to try your solution.  Thank you for responding.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.