FW-1 NG FP3 Dual NAT

[robbiear]

Help Needed,

I have the following setup-

server1----------FW-1----------server2

I need to setup dual nat so that server1 network does not see addresses from server2 network and vice-versa.

What objects do i need to define and manual NAT rules.

I have created server1 net, server1 host, server 2 net and server3 host.

Please help!!!!!

Regards

robbiear

 

[Piloria]

you shouldnt need any manual NAT rules
but if you want the two servers to comunicate then you will require a static NAT on each server object
and a rule to allow the required protocols between the two networks

 

[robbiear]

Hi Piloria,

Can you expand on this!!!
Sorry for the dumb questions but I am new to this.

Regards

 

[Piloria]

i am assuming you want the two servers to be able to comunicate but to hide actual IP addresses behind NAT
you will need 2 fictional IP address ranges
192.168.1.0
192.168.2.0
is an example

depending what trafic is passing between networks would determine the type of NAT.

for the 2 servers to be visible

in server 1 object click the Nat tab
enable translation
and select Static NAT
chose an ip adderess from rfictional range 1
192.168.1.1

repeat for server 2 using
192.168.2.1

if you want machine from network 1 to be able to see server 2 and network 2 to see server 1

on network 1 object
select NAT tab
chose Hide NAT
use 192.168.1.2

repeat for network 2
using 192.168.2.2

this method is fine aslong as all you are doing is as you describe it may complicate things if you have a thired interface on the firewall where you are trying to get an intenet connection for machines in network 1 or 2