Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 52
  • Last Modified:

SonicWALL TZ400 Access Single X0 Interface IP from Many X3 Interface IP’s

I want to be able to access X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24

1.      X0 (LAN) and X3 (LAN2) are trusted interfaces and have corresponding Any/Any access to each other as separate firewall rules (automatically created by SonicWALL when trusted is enabled).
2.      I created address object AO_X0_IP for 192.168.1.51 and a corresponding address object AO_X3_IP to translate to 172.16.1.51
3.      I then created address object AO_X3_RNG for 172.16.1.0/24 for full range of subnet
4.      I then created and enabled the following NAT policy
        a.      Original Source: AO_X3_RNG
        b.      Translated Source: Original
        c.      Original Destination: AO_X3_IP
        d.      Translated Destination: AO_X0_IP
        e.      Original Service: Any
        f.      Translated Service: Original
        g.      Inbound Interface: Any
        h.      Outbound Interface: Any

This all seems correct, but yet I cannot access, or even ping, X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24.   That is, when I'm on the X3 subnet and I ping 172.16.1.51 it should translate to 192.168.1.51 on X0 and reply back, but no joy.  Can anyone help me solve this problem?  Thank you.
0
Nathan Vanderwyst
Asked:
Nathan Vanderwyst
  • 3
1 Solution
 
masnrockCommented:
The translation actually sounds like an unnecessary layer of headaches. I would delete it, go to the access rules, and create a LAN > LAN rule that allows traffic from X3 to X0.

Is there a reason why you were trying to do NAT for this particular issue?
0
 
Nathan VanderwystAuthor Commented:
I want to separate the two LAN's so that there is no traffic between them except for hitting that single IP address.   Your suggestion did not work.
0
 
Nathan VanderwystAuthor Commented:
I was mistaken, my first NAT did work, it was just PING wouldn't work.  I did change the Original Source to X3 Subnet instead of the custom address object of the full ip range since it was redundant.  Thank you for your help.

Original Source: X3 Subnet
Translated Source: Original
Original Destination: AO_X3_IP
Translated Destination: AO_X0_IP
Original Service: Any
Translated Service: Original
Inbound Interface: Any
Outbound Interface: Any
0
 
Nathan VanderwystAuthor Commented:
I did not know that PING did not work across the interfaces.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now