Solved

Nat Policy SonicWall TZ170

Posted on 2009-05-13
3
1,763 Views
Last Modified: 2013-11-16
SonicWall TZ170
OS- Sonic OS Enhanced 2.1.02
Three zones on the firewall: WAN- 192.168.1.1, LAN- 172.16.1.1, OPT (DMZ)- 10.10.10.1

I am trying to set up a NAT policy from the DMZ to the LAN zone and back.  I want machine A (10.10.10.2) connected to the OPT port to look like it is coming from the LAN Port (172.16.1.1) when it contacts machine b (172.16.1.2) on the LAN using ssh.

[10.10.10.2] >>> [10.10.10.1 OPT-SONICWALL-LAN 172.16.1.1] >>> [172.16.1.2]

In the left margin I went to NETWORK>NAT POLICIES> ADD
Original Source: 10.10.10.2
Translated Source: 172.16.1.1
Original Destination:  10.10.10.1
Translated Destination: 172.16.1.2
Original Service: SSH
Translated Service: SSH
Inbound Interface: ANY
Outbound Interface: ANY

Original Source: 172.16.1.2
Translated Source: 10.10.10.1
Original Destination:  172.16.1.1
Translated Destination: 10.10.10.2
Original Service: SSH
Translated Service: SSH
Inbound Interface: ANY
Outbound Interface: ANY

It takes the policy without error and looks like it should work.

I also setup firewall rules to allow the traffic from the DMZ to the LAN.

I try to ssh from 10.10.10.2 to 172.16.1.2 and the outgoing packet makes it out of the SonicWall, but it has a source address of 10.10.10.2.   The sonicwall is simply passing the packet through and not changing the source address to 172.16.1.1.  So when 172.16.1.2 gets it it doesn't know what to do with it.  No matter what I try the packet passes through the SonicWall with out it being NATed to 172.16.1.1.

I'm looking for any suggestions on this.  I've tried everything I can think of.    
0
Comment
Question by:credog
  • 2
3 Comments
 
LVL 6

Accepted Solution

by:
KevinCovert earned 500 total points
ID: 24376892
Try using a translated IP that is not your gateway IP.  

orig        <<>> translated
10.x.x.2.<<>>172.x.x.3

172.x.x.2 <<>> 10.x.x.3

I would give that a shot first.
0
 
LVL 6

Expert Comment

by:KevinCovert
ID: 24437130
How are you doing on this issue?
0
 

Author Closing Comment

by:credog
ID: 31581024
Sorry it took so long to get back to this issue.  We decided to go another way, so I was unable to try your solution.  Thank you for responding.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question