Quantcast
Viewing all articles
Browse latest Browse all 60861

Re: Dual Wan Help! (newbie)

Here's one that'd work for FTP (note, I'm assuming you have dynamic IPs, rather than statics).   Setting them for other services is just as simple (just change ports, etc).

 

FIREWALL:

        rule 10 {
            action accept
            description FTP
            destination {
                port 21
            }
            protocol tcp
            state {
                new enable
            }
        }

DNAT - WAN_1

        rule 10 {
            description FTP
            destination {
                port 21
            }
            inbound-interface eth0
            inside-address {
                address 192.168.100.20
                port 21
            }
            log disable
            protocol tcp
            type destination
        }

 

DNAT WAN_2

        rule 11 {
            description FTP
            destination {
                port 21
            }
            inbound-interface eth1
            inside-address {
                address 192.168.100.20
                port 21
            }
            log disable
            protocol tcp
            type destination
        }

 

Then the next firewall rule (for whatever service) would be say rule 15, with NAT rules 15 and 16 (you don't have to do it this way -- it just helps me keep things straight).


Viewing all articles
Browse latest Browse all 60861

Trending Articles