Zone_Communication

Hi All ,

I have some challenges with below setup kindly provide your valuable inputs to get going with the same 

Zone Name - Untrust Eth0/0

Zone Name - Trust Eth0/3 & below are configure as sub interfaces

            Vlan 100 - 192.168.1.1/24 and i have device on LAN i.e. 192.168.1.254/24 on Core Switch

            Vlan 105 - 192.168.2.1/24

Zone Name - Connector Eth0/5 on SSG5 

           ip : 192.168.3.1/24 on SSG5 and

           ip : 192.168.3.2/24 on router connecting to SSG5 on Eth0/5

           and on router LAN i have a device with ip 192.168.4.254/24 

Goal : Reachability between 192.168.1.254 and 192.168.4.254 but via 192.168.2.1 i.e. when i try to reach from 192.168.1.254 it should reach 192.168.4.254 as 192.168.2.2 and when 192.168.4.254 tries to reach 192.168.2.2 it should then NAT to 192.168.1.254 

in short NAT should work from 192.168.1.254 to 192.168.2.2 for outgoing traffic and 192.168.2.2 NATed to 192.168.1.254 for incoming traffic

Regards

Ziad