Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SonicWALL TZ400 Access Single X0 Interface IP from Many X3 Interface IP’s

Posted on 2016-11-09
4
Medium Priority
?
50 Views
Last Modified: 2016-11-15
I want to be able to access X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24

1.      X0 (LAN) and X3 (LAN2) are trusted interfaces and have corresponding Any/Any access to each other as separate firewall rules (automatically created by SonicWALL when trusted is enabled).
2.      I created address object AO_X0_IP for 192.168.1.51 and a corresponding address object AO_X3_IP to translate to 172.16.1.51
3.      I then created address object AO_X3_RNG for 172.16.1.0/24 for full range of subnet
4.      I then created and enabled the following NAT policy
        a.      Original Source: AO_X3_RNG
        b.      Translated Source: Original
        c.      Original Destination: AO_X3_IP
        d.      Translated Destination: AO_X0_IP
        e.      Original Service: Any
        f.      Translated Service: Original
        g.      Inbound Interface: Any
        h.      Outbound Interface: Any

This all seems correct, but yet I cannot access, or even ping, X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24.   That is, when I'm on the X3 subnet and I ping 172.16.1.51 it should translate to 192.168.1.51 on X0 and reply back, but no joy.  Can anyone help me solve this problem?  Thank you.
0
Comment
Question by:Nathan Vanderwyst
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 31

Expert Comment

by:masnrock
ID: 41882420
The translation actually sounds like an unnecessary layer of headaches. I would delete it, go to the access rules, and create a LAN > LAN rule that allows traffic from X3 to X0.

Is there a reason why you were trying to do NAT for this particular issue?
0
 

Author Comment

by:Nathan Vanderwyst
ID: 41883142
I want to separate the two LAN's so that there is no traffic between them except for hitting that single IP address.   Your suggestion did not work.
0
 

Accepted Solution

by:
Nathan Vanderwyst earned 0 total points
ID: 41883216
I was mistaken, my first NAT did work, it was just PING wouldn't work.  I did change the Original Source to X3 Subnet instead of the custom address object of the full ip range since it was redundant.  Thank you for your help.

Original Source: X3 Subnet
Translated Source: Original
Original Destination: AO_X3_IP
Translated Destination: AO_X0_IP
Original Service: Any
Translated Service: Original
Inbound Interface: Any
Outbound Interface: Any
0
 

Author Closing Comment

by:Nathan Vanderwyst
ID: 41887625
I did not know that PING did not work across the interfaces.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question