[FW-1] NAT on PDS2100

[Kok-Hong <kokhongw@FW1-NOSPAMBEE-NET.COM>]

Hmm, I thought I had this nailed. But when I tried to add additional machines with static NAT, I'm getting reply from ip ..xxx.xxx :destination port unreachable.

 

The ARP is already published. And static route added to map ext. ip to the internal host. Default route on the internal host is pointing to pds2100 as the default gw. Host is able to ping the pds2100 internal interface, but unable to reach the external.

 

Basically perform the following:

1) Edit/publish ARP on PDS2100

2) Add static route mapping for ext ip to internal ip

3) Create workstation object with internal ip and automatic static external ip.

4) Add object into existing rules for other NAT host.

5) Publish policy

6) FWSTOP FWSTART.

 

but unable to get NAT working.

 

Any ideas?

 

Rgds,

Kok-Hong

Beenet Singapore Pte Ltd

31 International Business Park

#03-05 Creative Resource Building

Singapore 609921

Tel: +65-822-8108

Fax: +65-822-8107