Skip to main content
Bugbear
Bugbear
New Member
March 9, 2018
Question

DNAT and SNAT at the same time

  • March 9, 2018
  • 1 reply
  • 4688 views

Hi

 

We have a setup with a FortiGate 61E and want to connect two PLCs with it. On one PLC runs the normal application software (station), which cannot be changed. A simulation is running on the other PLC.

 

Basically it means that connections with different devices have to be pretended for the station. In order for the application to function correctly in the station, all devices which are created within the simulation must be connected. This means that the station sends data packets to several IP addresses and the simulation answers. The answers of the simulation have to be adapted in such a way that they look as if they come from many devices.

 

This would have to be done with a DNAT and SNAT for each connection. Each connection would be unique for both PLCs and would represent one device each.

 

The documentation for the version of FortiOS V5.6.3 also describes it (Combining source and destination NAT in the same policy).

 

Still, I can't make it work for me.

 

What do I have to do to make it work?

 

 

Cheers

Bugbear

    1 reply

    EMES
    EMES
    New Member
    March 9, 2018

    Are the devices in the same subnet?

    Bugbear
    BugbearAuthor
    New Member
    March 12, 2018

    No. The PLC's are located in different subnets.

     

    We have build a subnet to separate the regular application from the simulation. Our goal is to leave the station for the simulation untouched.

     

    Furthermore, there is the possibility in the future that we will have to simulate more than 100 devices each with an individual IP address. As I understand it, we have to change the subnetwork for the simulation.

      

    Terms & ConditionsAccessibility statement