USE SPECIFIC WAN IP FOR NAVIGATION

Options
Leandro85
Leandro85 Posts: 5
Friend Collector
in Security
Good morning at all,
my client has an ATP200 with multiple Public IPs on the same WAN port.
We want to configure that all servers use the first public IP and the rest of the LAN use the other another IP.

ATP200 config:
Public IP 1 --> 80.xx.xxx.x1
Public IP 2 --> 80.xx.xxx.x2
LAN -->  192.168.0.x
Servers --> 192.168.0.220-230
PCs --> 192.168.0.101-199

We want to use WAN IP 1 for servers and WAN IP 2 for clients.

How can I do this?

Thanks a lot.

Leandro

Accepted Solution

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 767  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin

All Replies

  • mMontana
    mMontana Posts: 1,302  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Leandro85 said:
    How can I do this?
    Writing correct routing rules. Assuming that your firewall is already correctly configured with multiple public IPs (same interface or not, that does not quite change the things).
    Moreover: AFAIK using two different public IP addresses wont' change the available bandwidth or should not chage BandWidthManagement in any way, if the firewall is not instructed appropriately.
  • Zyxel_Kevin
    Zyxel_Kevin Posts: 767  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin
  • Leandro85
    Leandro85 Posts: 5
    Friend Collector
    Options
    Thanks a LOT!!!


  • Leandro85
    Leandro85 Posts: 5
    Friend Collector
    Options
    Zyxel_Kevin said:
    Hi @Leandro85,
    Greeting,You could use Policy Route to implement the requirement.
    Please kindly find the following: 
    1) WANIP_1 for 80.xx.xxx.x1 , WANIP_2 for 80.xx.xxx.x2
    2) Source: PCs       Destination:any  -> SNAT:WANIP_1 
        Source: Servers  Destination:any  -> SNAT:WANIP_2

    Kevin
    This is what I was trying to do! Thank you very much for the reply, I have done the configuration and everything finally works as we wanted. Thanks again! Have a nice day and have a good weekend :)



  • Gennaroq
    Gennaroq Posts: 6
    Options
    A WAN IP address is your public or global IP address. Your computer uses this to access the internet via the wide area network

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）