Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This is I'm sure a very simple question for a server admin, but not so much for a programmer who doesn't want to break internet access for the entire company.

Our cable provider assigned to us two adjacent IP addresses. I would like to route certain traffic from the second ip address to a specific machine; but I am unsure how to set up the route. The X1 interface is set to WAN with subnet mask 255.255.255.224, which includes the additional IP address.

Is Network -> routing the correct place to set this? Do I need to create a new address object for just this single ip and use this as the source?

Any help will be greatly appreciated. Thank you in advance.

share|improve this question

2 Answers 2

up vote 3 down vote accepted

You will need to do a few things:

1) Create an address object on the WAN zone for the the public IP address you mentioned.

2) Create an address object on the LAN zone using the IP address of the host you wish to forward traffic to on the inside.

3) Create a NAT policy that uses an original source of ANY. Select the address object on the WAN zone you just created as the original destination. Set the translated source to ORIGINAL, and the translated destination as the address object you created on the LAN side. The Inbound interface should be X1 (WAN), the outbound interface can be ANY. You can optionally choose just the port/service you want to forward, or send them all.

4) Create a firewall rule from zone WAN to LAN. Source address ANY, destination address should be the WAN address object created earlier. Choose the proper services.

You may also want to to create a NAT policy in the opposite direction to perform source translation. This can be done easily when you create the first policy by checking the box "create reflective policy". This effectively would create a one to one NAT mapping from outside to inside for the selected hosts/IPs.

share|improve this answer

What you want is called a NAT. (Network Address Translation, translating a publicly reachable IP to a non-routed one, or vice-versa).

For your appliance, this is the manual, and they have an example of setting a NAT in Section 4, Deployment Scenarios, which starts on page 17.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.