USE SPECIFIC WAN IP FOR NAVIGATION

Leandro85
Leandro85 Posts: 5 image  Freshman Member
Friend Collector
in Security
Good morning at all,
my client has an ATP200 with multiple Public IPs on the same WAN port.
We want to configure that all servers use the first public IP and the rest of the LAN use the other another IP.

ATP200 config:
Public IP 1 --> 80.xx.xxx.x1
Public IP 2 --> 80.xx.xxx.x2
LAN -->  192.168.0.x
Servers --> 192.168.0.220-230
PCs --> 192.168.0.101-199

We want to use WAN IP 1 for servers and WAN IP 2 for clients.

How can I do this?

Thanks a lot.

Leandro

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 959 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin

All Replies

  • mMontana
    mMontana Posts: 1,443 image  Guru Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    Leandro85 said:
    How can I do this?
    Writing correct routing rules. Assuming that your firewall is already correctly configured with multiple public IPs (same interface or not, that does not quite change the things).
    Moreover: AFAIK using two different public IP addresses wont' change the available bandwidth or should not chage BandWidthManagement in any way, if the firewall is not instructed appropriately.
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 959 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Answer ✓
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin
  • Leandro85
    Leandro85 Posts: 5 image  Freshman Member
    Friend Collector
    Thanks a LOT!!!


  • Leandro85
    Leandro85 Posts: 5 image  Freshman Member
    Friend Collector
    Zyxel_Kevin said:
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin
    This is what I was trying to do! Thank you very much for the reply, I have done the configuration and everything finally works as we wanted. Thanks again! Have a nice day and have a good weekend :)



  • Gennaroq
    Gennaroq Posts: 6 image  Freshman Member
    A WAN IP address is your public or global IP address. Your computer uses this to access the internet via the wide area network

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）