SonicWALL TZ400 Access Single X0 Interface IP from Many X3 Interface IP’s

I want to be able to access X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24

1.      X0 (LAN) and X3 (LAN2) are trusted interfaces and have corresponding Any/Any access to each other as separate firewall rules (automatically created by SonicWALL when trusted is enabled).
2.      I created address object AO_X0_IP for 192.168.1.51 and a corresponding address object AO_X3_IP to translate to 172.16.1.51
3.      I then created address object AO_X3_RNG for 172.16.1.0/24 for full range of subnet
4.      I then created and enabled the following NAT policy
        a.      Original Source: AO_X3_RNG
        b.      Translated Source: Original
        c.      Original Destination: AO_X3_IP
        d.      Translated Destination: AO_X0_IP
        e.      Original Service: Any
        f.      Translated Service: Original
        g.      Inbound Interface: Any
        h.      Outbound Interface: Any

This all seems correct, but yet I cannot access, or even ping, X0 (LAN) IP 192.168.1.51 from X3 (LAN2) 172.16.1.0/24.   That is, when I'm on the X3 subnet and I ping 172.16.1.51 it should translate to 192.168.1.51 on X0 and reply back, but no joy.  Can anyone help me solve this problem?  Thank you.
Nathan VanderwystAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Nathan VanderwystConnect With a Mentor Author Commented:
I was mistaken, my first NAT did work, it was just PING wouldn't work.  I did change the Original Source to X3 Subnet instead of the custom address object of the full ip range since it was redundant.  Thank you for your help.

Original Source: X3 Subnet
Translated Source: Original
Original Destination: AO_X3_IP
Translated Destination: AO_X0_IP
Original Service: Any
Translated Service: Original
Inbound Interface: Any
Outbound Interface: Any
0
 
masnrockCommented:
The translation actually sounds like an unnecessary layer of headaches. I would delete it, go to the access rules, and create a LAN > LAN rule that allows traffic from X3 to X0.

Is there a reason why you were trying to do NAT for this particular issue?
0
 
Nathan VanderwystAuthor Commented:
I want to separate the two LAN's so that there is no traffic between them except for hitting that single IP address.   Your suggestion did not work.
0
 
Nathan VanderwystAuthor Commented:
I did not know that PING did not work across the interfaces.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.