topic Re: NAT question for R80.10 in Firewall and Security Management

NAT question for R80.10

Kristian_Nyquis — Mon, 17 Jul 2017 12:01:51 GMT

I have the following scenario:

Version of Gaia R80.10

External IP:

xx.xx.xx.104

xx.xx.xx.105

xx.xx.xx.106

In my network i have two diffrent webserver that both are using port 80.

On of the webserver i want to have on the external ip .105 and the other on .106

The webservers need to be open for connection from the outside.

On interface .104 i want to have all my "normal" outgoing/incoming trafic on the network.

The traffic on the .104 interface is working with a "Network Hide NAT" but i do not get the webserver trafic to work on .105 and 106

What type of NAT shoode i use?

Any exampels what i shoode configuer?

Re: NAT question for R80.10

cstueckrath — Mon, 17 Jul 2017 13:02:44 GMT

You can do this manually (Configuring Proxy ARP for Manual NAT ) or you could follow Automatic creation of Proxy ARP for Manual NAT rules on Security Gateway R80.10

Re: NAT question for R80.10

Kristian_Nyquis — Wed, 19 Jul 2017 13:51:35 GMT

I have tested Automatic creation of Proxy ARP for Manual NAT rules on Security Gateway R80.10 and that works in my R80.10 system.

Re: NAT question for R80.10

Peter_Sandkuijl — Thu, 20 Jul 2017 08:35:45 GMT

The NAT should be static and as a result the ARP entry on the external interface can be either manual or automatic as described by the others. Check Point has a preference for automatic