Port forward than route

kizi · 02-02-2010, 03:48 AM

Hi fellow untanglers.

I need some help from you guys

What I would like to do is port forward my Public ip-s to a certain local ip-s and than route them through untangle.

local IP-s will be behind untangle and untangle will not do NAT instead just route the traffic.

this is the topology

Mikrotik - switch - Untangle - switch - users

Source NAT works fine, I can access the internet and everything but when I do Destination NAT and route traffic through untangle, it does not work anymore.

I suspect it has something to do with Untangles security option on WAN interface.

Just to clear it out, i can not use bridge in my scenario because it does not fit in to my topology, I need untangle in router mode without NAT. I cant put untangle before mikrotik as well because i want to filter only certain VLAN and not all the traffic.

thanks in advance,
Dardan

kizi · 02-02-2010, 06:01 AM

I think I solved the problem.

What I did is disable the WAN interface all together and instead made two LAN interfaces, what I do know is just route traffic through the LAN interfaces without worrying about WAN polices.

It`s basically working like a bridge but doing it by routing, I`m happy with this I just need to know if it is really working I will keep you guys posted.

One more thing I would like to achieve is make untangle forward dhcp packets, something called ip helper address in Cisco... or dhcp forwarder by other vendors.

is this possible? is not a biggie as I can do dhcp from untangle itself or I can just use static addresses just wondering if it is possible.

02-02-2010, 03:48 AM	#1 (permalink)
kizi Newbie Join Date: Feb 2010 Posts: 2	Port forward than route Hi fellow untanglers. I need some help from you guys What I would like to do is port forward my Public ip-s to a certain local ip-s and than route them through untangle. local IP-s will be behind untangle and untangle will not do NAT instead just route the traffic. this is the topology Mikrotik - switch - Untangle - switch - users Source NAT works fine, I can access the internet and everything but when I do Destination NAT and route traffic through untangle, it does not work anymore. I suspect it has something to do with Untangles security option on WAN interface. Just to clear it out, i can not use bridge in my scenario because it does not fit in to my topology, I need untangle in router mode without NAT. I cant put untangle before mikrotik as well because i want to filter only certain VLAN and not all the traffic. thanks in advance, Dardan

02-02-2010, 06:01 AM	#2 (permalink)
kizi Newbie Join Date: Feb 2010 Posts: 2	I think I solved the problem. What I did is disable the WAN interface all together and instead made two LAN interfaces, what I do know is just route traffic through the LAN interfaces without worrying about WAN polices. It`s basically working like a bridge but doing it by routing, I`m happy with this I just need to know if it is really working I will keep you guys posted. One more thing I would like to achieve is make untangle forward dhcp packets, something called ip helper address in Cisco... or dhcp forwarder by other vendors. is this possible? is not a biggie as I can do dhcp from untangle itself or I can just use static addresses just wondering if it is possible. Last edited by kizi; 02-02-2010 at 06:43 AM..