Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
mcguppy
Participant
Jump to solution

outgoing source natting

I would like to hide a local network behind a specific external IP for outgoing traffic (Source Natting, but not the Gateway external IP address). 

In the GUI, I have only the possibility to switch on or of "Hide internal networks behind the Gatewway's external IP address".

Can this be done somehow with the CLI?

I am running Quantum Spark 1800 Appliance R80.20.35

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend Legend
Legend

Add a manual NAT rule:

manual_nat.png

I have used 8.8.8.8 as an example here - you have to use a specific routable external IP instead to make it work !

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist

View solution in original post

0 Kudos
5 Replies
G_W_Albrecht
Legend Legend
Legend

Add a manual NAT rule:

manual_nat.png

I have used 8.8.8.8 as an example here - you have to use a specific routable external IP instead to make it work !

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
mcguppy
Participant

Thank you so much for pointing me to the right direction. 

0 Kudos
mcguppy
Participant

We run into a problem with this solution today. We saw in the packet capture, the outgoing traffic took the correct IP I set in the targeted source, but when the answer came back, the FW did not answer on ARP requests for this address at all and like this, I was not able to get a working connection.

In the end we created a server object with the tick set that outgoing traffic will hide behind this address as well Then it was working.

0 Kudos
the_rock
Legend
Legend

Just do what @G_W_Albrecht said, since I assume its locally managed appliance.

Andy

0 Kudos
G_W_Albrecht
Legend Legend
Legend

If he talks about GUI it is...

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events