topic Re: Lab - MGMT Behind Gateway - SIC Issue in General Topics

Lab - MGMT Behind Gateway - SIC Issue

Wyman — Tue, 16 Mar 2021 11:06:25 GMT

Hi everyone. Firstly, apologies if this is the wrong place to post. I'm trying to lab the setup I have in work for learning purposes. The setup is as follows:

The MGMT server sits behind the CP gateway in one of our offices and is assigned an internal IP
There is a MGMT server dummy object pointing to an external IP
There is a manual NAT rule for the MGMT server for traffic in both directions
The network object on which the MGMT server sits is set to hide behind the gateway IP

I've copied the same configuration in my lab but it's not allowing me to add the remote gateway. My topology:

Looking at some SKs, I know there are multiple ways of setting the NAT but I'm trying to keep as close to how we have it setup in work as possible.

From a routing perspective, I have configured the necessary static routes on my virtual router to point to both subnets and set the DG to the correct IPs. If anyone has any ideas then it would be much appreciated!

Re: Lab - MGMT Behind Gateway - SIC Issue

_Val_ — Tue, 16 Mar 2021 11:15:07 GMT

I assume, by "t's not allowing me to add the remote gateway" you mean, SIC with an external GW does not work.

Use Static NAT for your MGMT server, with an IP address different from your local GW, and not NAT Hide.

Re: Lab - MGMT Behind Gateway - SIC Issue

Wyman — Tue, 16 Mar 2021 15:34:02 GMT

Hi Val. Thanks, I'll give that a try.

Re: Lab - MGMT Behind Gateway - SIC Issue

Wyman — Thu, 18 Mar 2021 16:39:55 GMT

Hi Val. Thanks, it worked!

Re: Lab - MGMT Behind Gateway - SIC Issue

_Val_ — Thu, 18 Mar 2021 16:49:08 GMT

no prob.