I have a block of 5 usable IP's from my ISP. I would like to set up NAT to map all of the address to certian servers inside.

Astaro V4

192.168.1.201 = Internal_If (STD Ethernet)

x.x.x.128 = Network
x.x.x.129 = Router to ISP (My Gateway)
x.x.x.130 = External_If (STD Ethernet)
x.x.x.131 = would like to be web server
x.x.x.132 = would like to be mail server
x.x.x.133 = would like to be ftp server
x.x.x.134 = would like to be some-other server
x.x.x.135 = Broadcast

I know how to set up NAT using the External_If NAT'ed to an internal server but how do I add the others?

Thanks.

You would create the additional IPs on the external interface of your ASL.
Create DNAT rules such that all services on eack external IP would be redirected to the corresponding internal IP.
Then create SNAT rules for each internal IP to change the internal IP to the corresponding external IP of your ASL.

Example:
DNAT:
Source: any, Service: any
Dest: 1.2.3.131 (external ASL IP for webserver)
Change Dest to: 192.168.1.131 (internal IP of webserver)
Change service: none

SNAT:
Source: 192.168.1.131, Service: any
Change Source to: 1.2.3.131
Change service: none

This will redirect all incoming traffic on 1.2.3.131 to 192.168.1.131 and have any outbound traffic from 192.168.1.131 appear as if it came from 1.2.3.131.

No sweat.

I answered my own question. I hope this post helps...

1) Assigned all the IP address as secondary to the External_If with ip/mask/gateway under Interfaces


2) Created all the ISP Assigned addresses under Networks
Name= IPBlock131
address=x.x.x.131
netmask=32
Repeated for all addresses


2a) Created all the internal servers addresses under Networks
Name = ServerName
address = 192.168.1.18
netmask = 32
Repeated for all internal servers


3) Created a DNAT/SNAT:

Source Addr = No Match

Destin Addr = IPBlock*** - (IPBlock*** defined in Networks. Step 2)

Service = HTTP

Chg Src Addr = No Change

Chg Dest Addr = Internal Server - (defined in Networks. Step 2a)

Repeated for all needed addresses


4) Created Rules

From Internal_If Any/Any Allow

From Internal_Network Any/Any Allow

From Any HTTP ServerName Allow (ServerName defined in Networks. Step 2a)

From IPBlock*** HTTP ServerName Allow (IPBlock*** defined in Networks. Step 2)

Repeated for all needed addresses

Hey Jim, Thanks! I think this should be as easy as pie for the next forum surfer =)