NAT Route, Almost IP Spoofing
Posted on 2014-03-03
I have this very specialized PC that requires this very specialized setup. Please see if you can help me out.
The PC has two NICs. One connects to a Verzion network, let's say 64.xx.yy.zz That part works fine!
The other NIC needs to do this:
1. Connect to our internal 192.168.11.y network. Easy, done.
2. Connect, via Sonicwall VPN Client, to an external network. Easy, done.
3. When trying to connect to 192.168.4.x, traffic must appear to come from 10.42.102.55. These originally ran on a leased line, but the organization is doing away with leased lines and wants us to go VPN. I can ping the 192.168.4.20 interface, so I am hitting their host, however, their host says "I will only accept traffic from you on 10.42.102.55." Hmmmm..how the heck do I do that? I have tried a one to one NAT route in my sonicwall, but the only way to do it makes ALL traffic from the local 192.168.11.y appear to be coming from 10.42.102.55, and that breaks a lot of things. What I need is for the sonicwall to have a rule that says "if 192.168.11.100 is trying to connect to 192.168.4.20, then make it appear as if the traffic is coming from 10.42.102.55".
In digging through Cisco manuals, they have something called "route maps" that accomplishes this. Does the Sonicwall have something similar?