Solved

Watchguard X700 Firewall - Configure Static NAT or Complete DMZ

Posted on 2010-09-20
2
1,094 Views
Last Modified: 2012-05-10
Hi, I've got a voip application which needs either a Static NAT or a complete DMZ. Firewall is an old Watchguard X700 Firewall.

Can someone post a step by step to get the box to do DMZ to an internal machine. Statically map an external address to an internal for example.

We've done this as many times but it's just not working.

Thanks
0
Comment
Question by:binele
2 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 33730864
If you have a public IP which you would like to dedicate for the VoIP device so that WG would not do any
PAT, then configure 1-1 NAT as below:
http://watchguard.custhelp.com/app/answers/detail/a_id/1545/kw/1-1%20NAT%20configuration/session/L3NpZC9pTjd0dENhaw%3D%3D

Also, ensure that the public IP you have selected for 1-1 NAT was not previously added for static NAT forwarding by adding under external aliases:
http://watchguard.custhelp.com/app/answers/detail/a_id/1318/session/L3NpZC9pTjd0dENhaw%3D%3D

Finally create a service to allow traffic from external host/subnet to this 1-1 NAT public IP [or use ANY for testing purposes and then narrow down the service to fewer ports/protocols]; explained in the first article.

Please update.

Thank you.
0
 

Author Comment

by:binele
ID: 33734061
Thank you. This was spot on.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now