Public IP Block Setup on Sonicwall 2040 Enhanced OS

[GeoDM]

I have the latest firmware for the Sonicwall Pro 2040 Enhanced OS. We are currently switching ISP's from a cable provider to a fiber provider. They gave me a WAN IP of 67.208.x.x and then a routed block of public ips, 172.x.x.48/29. I was instructed by the ISP to place 172.x.x.49 on a LAN interface and point my webserver to that as the gatway. The webserver ip is to be 172.x.x.50. From there create a firewall rule to allow http and I should see my webserver. Alls i get are gateway timeouts and when I test the internet connection from the webserver at

http://www.whatismyip.com

I get 67.208.x.x instead of 172.x.x.50. So I need to stop that LAN interface from NATing. Best method?

I am clearly missing a step here and the ISP havent been too helpful. I have always been given blocks of public ips that are on the same subnet as the WAN ip so NATing them through was never a problem. This is new to me so any help would be great to point me in the correct direction.

 

[mpit52]

GeoDm
Is your WebServer on a different subnet then the rest of your LAN? My suggestion to you would be to use the wizards whenever possible.
Steps:
1) Go to firewall, Service Objects and create your custom port groups (if needed, webserver is a default one which includes http/https)

2)Select wizards, then public server wizard. From here you will select either "webserver" service group, or the group you created in step 1. Select next and fill in the local IP address of your WebServer (name the address object). Select next and enter the desired WAN ip address you would like to use.

Once you hit finish, this will automatically setup address object, NAT policies and Firewall rules to grant access from 67.208.x.X to your webserver.

Instruction from Sonicwall:

http://help.mysonicwall.com/sw/eng/601/ui2/22200/Wizards/Public_Server_Wizard.htm

Hopes this helps.
-Matt