It's not just 1 address...it will end up being 10-20. I just picked
a class C for ease of use.
My 'private' addresses (on the LAN side) are actually public
routable addresses (a /27...255.255.255.224).
I'm statically assigning the private addresses.
Thanks :)
-Ian
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 31, 2002 2:43 PM
To: [EMAIL PROTECTED]
Subject: RE: [SonicWALL]- Can I do this part 2. Public on LAN, private
on DMZ with NAT
How big of a subnet do you want to create? If you're just wanting that one
single address to be
NAT'd and in there, that's an incorrect subnet mask, that would be for an
entire class C range, and
you'd want to enter in 192.168.0.1 or 192.168.0.0, I forget exactly how the
Sonicwall likes you to
enter the stuff in. Also make sure that the 192.168.1.100 address is NOT
located in the same subnet
that your private addresses on the LAN are. How are you assigning addresses
to the machines in the
DMZ as well, static through the OS or with a DHCP server? If DHCP server,
is it a machine located
in the DMZ as well?
Cavell McDermott
Domino Admin
APW Ltd. - Texas Campus
214-343-1400 - Main
214-355-2022 - Direct
214-341-9950 - Fax
http://www.apw.com
Ian McBride
<ian@cticommunica To: "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>
tions.com> cc:
Sent by: Subject: RE: [SonicWALL]-
Can I do this part 2. Public on LAN,
sonicwall-owner@p private on DMZ with NAT
eake.com
05/31/2002 03:15
PM
Please respond to
sonicwall
Ok, I tried to do this and was quickly foiled by the Sonicwall.
Everything worked fine until I tried to set up the DMZ in NAT
mode.
For the 'Private Address' I entered 192.168.1.100, and put in a subnet of
255.255.255.0. I left the Many to One option as 0.0.0.0. I hit 'Update' and
the Sonicwall locked up and I lost my net connection. I had to do a reset
and restore of my config.
*sigh* Anyone know why that happened?
_ian
-----Original Message-----
From: Ian McBride [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 31, 2002 9:50 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [SonicWALL]- Can I do this part 2. Public on LAN, private
on DMZ with NAT
When I tried to NAT just the DMZ, I got the following error:
Cannot enable NAT on DMZ without enabling NAT on LAN
That seems kind of silly to me. It looks like that's what I'll
have
to do (with one-to-one NAT), though.
I appreciate all of your help Curtis!
-Ian
-----Original Message-----
From: Dude, Curtis [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 31, 2002 6:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [SonicWALL]- Can I do this part 2. Public on LAN, private
on DMZ with NAT
So you are saying you went NAT accross the board. Both on the LAN and DMZ?
Did you then do "One-to-One NAT" for access to your LAN, where needed, from
the internet? That's how I have it setup right now and it works great. I
thought you just wanted to NAT the DMZ, which seems like it is possible when
I look at it. You origionally ran straight public addresses on your LAN
right? I would have thought you could have simply added the NAT to your DMZ
and that's it.
-Curtis
---
[This E-mail scanned for viruses by Declude/F-Prot AV]
============================================================================
=======================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email
put the following:
unsubscribe sonicwall your_name
The archive of this list is at
http://www.mail-archive.com/sonicwall%40peake.com/
---
[This E-mail scanned for viruses by Declude/F-Prot AV]
============================================================================
=======================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email
put the following: unsubscribe sonicwall your_name
The archive of this list is at
http://www.mail-archive.com/sonicwall%40peake.com/
---
[This E-mail scanned for viruses by Declude/F-Prot AV]
===================================================================================================
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the
following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/