Dnat

[Infnd]

Здравствуйте,
Кто настраивал Dnat? поделитесь опытом.

Пробросить порт из Интернет зоны (untrusted) в зону Lan(trusted)

Настроил все по инструкции, порт закрыт. подскажите где ошибка:


security zone-pair untrusted trusted
rule 10
action permit
match protocol TCP
match source-address any
match destination-address Dipol_server
match destination-nat
enable
exit
exit

nat destination
pool DipolFM
ip address 10.*.*.5
ip port 8020
exit
ruleset nat_outside
from zone untrusted
rule 10
description "nat_outside_for_dipol"
match protocol tcp
match source-address any
match destination-address Dipol_server
match source-port Dipol_outside
match destination-port dipol_server_port
action destination-nat pool DipolFM
enable
exit

[Garri]

Код: Выделить всё


object-group service Dipol_port
  port-range 8020
exit

object-group network Dipol_server
  ip address-range IP-адрес-сервера_внутри
exit

security zone-pair untrusted trusted
rule 10
    action permit
    match protocol tcp
    match source-address any
    match destination-address Dipol_server
    match destination-nat
    match source-port any
    match destination-port Dipol_port
    enable
exit
   

nat destination
  pool DipolFM
    ip address IP-адрес-сервера_внутри
    ip port 8020
  exit
  ruleset nat_outside
    from zone untrusted
    rule 10
      description "nat_outside_for_dipol"
      match protocol tcp
      match destination-address Внешний_IP
      match destination-port Dipol_port
      action destination-nat pool DipolFM
      enable
    exit
  exit
exit