Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 9: Configuring Proxies
Redirected proxy connections
248
Figure 122: Address
redirection for inbound
proxy
Telnet server
172.25.5.5
internal
network
The Sidewinder G2 proxy redirects
(remaps) the Telnet session to address
172.25.5.5 (but the address is
concealed from the external network)
redirect
192.55.214.24
Sidewinder G2
external
network
Telnet client
192.55.214.25
The client can access the internal
server, but must use the Sidewinder
G2 external address in the Telnet
request
With redirection configured, the connection is proxied to an address that is
different from the original destination address. In Figure 122, a connection
request from Internet address 192.55.214.25 is proxied to the external side of
the Sidewinder G2 (192.55.214.24). The proxy then redirects the connection to
172.25.5.5 and proxies the session to the internal host. From the external
system’s point of view, the destination is 192.55.214.24, when in fact, the
destination is really 172.25.5.5.
Address redirection can also be applied to solve more complicated problems.
Suppose you want to allow inbound Telnet connections to three different hosts
on your internal network. If you configure your router to route multiple
addresses to the Sidewinder G2, it can then accept the connections and proxy
them through to hosts on the internal network. Redirected proxy connections
provide the address translation between IP addresses which are valid and
routed on the Internet and private IP addresses on the corporate network. So if
you want to redirect all incoming connections to one of three hosts, then you
must reserve three IP addresses for your Sidewinder G2, or use netmaps. (For
information on using netmaps, see “Network objects” on page 105.)
Note: To avoid using multiple Sidewinder G2 addresses in this scenario, you could
set up port redirection rather than address redirection (described in the following
section).