Welcome to ISAserver.org

One direction NAT & routing from oppposite direction

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> One direction NAT & routing from oppposite direction

Page: [1]

Message

<< Older Topic Newer Topic >>

One direction NAT & routing from oppposite direction - 4.Jun.2003 8:59:00 AM

ZloyShaman

Posts: 2
Joined: 4.Jun.2003
Status: offline

I have ISA SP1 installed on W2k AS SP3 computer with 2 interfaces:
10.36.25.2/24 & 10.3.3.1/24
There is 10.36.25.0-10.36.25.255 entry in LAT.
I need do NAT, when packet comes from 10.36.25.0 network and do routing, when packet comes from 10.3.3.0 network. Is it generally possible with ISA? (I did it with Winroute Firewall - it's very easy there).
I tried to Enable IP filtering, IP routing, allow all IP traffic (in IP packet Filters and Protocol Rules). When packet from 10.3.3.0 network comes on 10.3.3.1 interface a record 'ALLOW' appears in IP filter log, but no packets appears on 10.36.25.2 interface.

Thanks.

Post #: 1

Featured Links*

RE: One direction NAT & routing from oppposite dire... - 4.Jun.2003 7:55:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Zloy,

ISA will always do NAT between untrusted (external) and trusted (internal) interfaces. You can't switch that off! For outbound access you need to define protocol and site&content rules. For inbound access you need to define web and/or server publishing rules.

HTH,
Stefaan

[ June 04, 2003, 07:56 PM: Message edited by: spouseele ]

(in reply to ZloyShaman)

Post #: 2

RE: One direction NAT & routing from oppposite dire... - 5.Jun.2003 7:41:00 AM

ZloyShaman

Posts: 2
Joined: 4.Jun.2003
Status: offline

quote:
Originally posted by spouseele:
Hi Zloy,

ISA will always do NAT between untrusted (external) and trusted (internal) interfaces. You can't switch that off!

Really? That's a pity [Frown]