Nat Loopback not Working

2»

All Replies

  • ticsystems
    ticsystems Posts: 69  ZCNE Certified
    First Comment Friend Collector Nebula Gratitude Fifth Anniversary
    edited January 2022
    PeterUK said:

    Doing a test you might be able to get NAT loopback work if your WAN IP is static all you have to do is make another NAT rule with the same setting and put in your real External WAN IP even if it not on the ATP interface.

    I have tested it and it does not work. When putting the private ip it does not open ports.
    This is how to configure it from the beginning.

  • PeterUK
    PeterUK Posts: 3,390  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    You make one rule with private ip 172.26.10.245 for External IP you then make another rule for the same port with External IP being your real WAN IP. So that for LAN you go to your domain which will be your WAN IP and the ATP should loopback

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,511  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Hi @ticsystems,

    You can try to add an internal DNS A record (e.g. www.xxx.com 172.26.10.245) in ATP700, and LAN side hosts DNS server set to ATP-700. Once LAN hosts access to www.xxx.com, it will not go ISP router. 


     
  • ticsystems
    ticsystems Posts: 69  ZCNE Certified
    First Comment Friend Collector Nebula Gratitude Fifth Anniversary
    Hi @ticsystems,

    You can try to add an internal DNS A record (e.g. www.xxx.com 172.26.10.245) in ATP700, and LAN side hosts DNS server set to ATP-700. Once LAN hosts access to www.xxx.com, it will not go ISP router. 


     
    I have a active directory server. I will look at configuring it on the Windows DNS server. Thanks!!!
  • ticsystems
    ticsystems Posts: 69  ZCNE Certified
    First Comment Friend Collector Nebula Gratitude Fifth Anniversary
    EIt is not the ideal solution but it work.
    Thanks!
  • ticsystems
    ticsystems Posts: 69  ZCNE Certified
    First Comment Friend Collector Nebula Gratitude Fifth Anniversary
    Hi all. It is not a viable option. Behind the domain xxx.com they have a lot of external services and it should generate a lot of A records. I need natloopback to work.
  • PeterUK
    PeterUK Posts: 3,390  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    The way I said will work you need a LAN to LAN firewall rule for it to work.



Security Highlight