port address translation

[oliver]

hello,

we´re using SPLAT R60.

there´s a change request to enable http/https from one of our public ip addresses be redirected to a host in dmznet2 and from the same public ip 25/tcp to a host in dmznet1.

i´ve enabled all necessary services in security policy and configured manual static nat:

ANY - TrueIP - http - Original - host1 -Original
ANY - TrueIP - https - Original - host1 -Original
ANY - TrueIP - smtp - Original - host2 -Original

Manual NAT rule "Translate destination on client side" is enabled but when entering fw ctl arp i don´t get an arp entry listed for TrueIP.

thanks in advance for any help!

kind regards
oliver

[mcnallym]

With the manual NAT then there is no automatic Arp entry created.

Create an entry in the local.arp file for the TrueIP address with the MAC of the external interface.

[sebastan_bach]

hi rather than adding manual arp entries just add a route on the external device for the static public ip pointing to the external interface of the firewall.

cause i have faced issues in splat even though adding manual arp entries sometimes the firewall would not respond to arp request.but when u add a route it works like a charm

this is much easier.

regards

sebastan

[oliver]

ok, thank you very much for your replies.

have a great day
oliver