Re: Can you use "custom NAT" with ISP redundancy? No Problem at all. I have been away which is why the delay in responding. Is covered in #sk25152 Whilst this refers to Static NAT then it will also work for Hide NAT as well. You will need to have the firewall box proxy arp for the IP address as Auto Arp doesn't work correctly in ISP redundancy. In general you define two Public Objects to hide behind and write the NAT rules so that uses the two Dynamic objects that you defined and configured on the actual gateways. ie src= internal_net dst= Dyn_ISP_A xlatesrc=Hide(Public IP Address) xlate dest = original with src= internal_net dst= Dyn_ISP_B xlatesrc=Hide(Public IP Address) xlate dest = original for if goes out via ISP_B You obviously don't need to configure an inbound rule as you would with a Static NAT. |