Changes between Version 1 and Version 2 of Cnbp2019/Agenda/pfSenseFirewall

Timestamp:

Mar 13, 2019, 5:34:58 AM (6 years ago)

Author:

admin

Comment:

--

Cnbp2019/Agenda/pfSenseFirewall

@@ -49 +49 @@
     • Address: 192.248.7.XYZ and the mask (/) as 32 
     • Description: Public IP for server 
-and Save 
+and Save  
 
 == NAT ==
@@ -98 +98 @@
 Once drag and Dropping finished click '''Save''' and '''Apply''' to complete the separation. 
 
+== Configuring NAT Mapping for our Lab Setup==
+
+In our Lab setup We have Monitoring server and Web server that need to be accessed from outside. But they are assign private IPs.
+To access those servers from outside we need to create NAT mapping and their relevant Virtual IPs shown as above. After adding NAT
+mappings we will also need to create rules to allow network traffic to those servers from outside.
+
+Let us add a VIP and NAT mapping for Monitoring server.
+
+Go to Firewall > Virtual IPs > ''' +Add '''
+    • Type: IP Alias 
+    • Interface: WAN 
+    • Address: 192.248.7.XYZ and the mask (/) as 32 
+    • Description: Public IP for Monitoring server 
+and Save  
+
+Go to Firewall > 1:1 > Add 
+    • Interface: WAN 
+    • External Subnet IP: 192.248.7.XYZ 
+    • Internal IP: Single host 10.XY.5.10 
+    • Destination: Any 
+    • Description: NAT_Monitoring 
+
+Lets allow http ports from outside 
+
+Go to Firewall > Rules > LAN > Add to end 
+    • Action: pass 
+    • Interface: LAN 
+    • Address Family: IPv4 
+    • Protocol: TCP 
+    • Source: Any 
+    • Destination: Single Host, Enter 10.XY.5.10/32 
+    • Destination Port: HTTP(80) 
+    • Log: ticked 
+    • Description: Allow any to Web ports of Monitoring server 
+Save 
+
+Now we will add a VIP and NAT mapping for our Web server.
+
+Go to Firewall > Virtual IPs > ''' +Add '''
+    • Type: IP Alias 
+    • Interface: WAN 
+    • Address: 192.248.7.XYZ and the mask (/) as 32 
+    • Description: Public IP for Web server 
+and Save  
+
+Go to Firewall > 1:1 > Add 
+    • Interface: WAN 
+    • External Subnet IP: 192.248.7.XYZ 
+    • Internal IP: Single host 192.168.XY.100/32 
+    • Destination: Any 
+    • Description: NAT_Web
+
+Lets allow http ports from outside 
+
+Go to Firewall > Rules > DMZ > Add to end 
+    • Action: pass 
+    • Interface: DMZ 
+    • Address Family: IPv4 
+    • Protocol: TCP 
+    • Source: Any 
+    • Destination: Single Host, Enter 192.168.XY.100/32 
+    • Destination Port: HTTP(80) 
+    • Log: ticked 
+    • Description: Allow any to Web ports of Web server 
+Save
+
 == Traffic Shaper ==