Allow DNAT at RED location
It was my vision of the RED device that I would be able to replace the router/firewall devices at remote client sites and manage the sites from a central console or ASG. I was surprised last night when I learned that I cannot forward ports through a RED node.
In my scenario I have two branch offices which are using RED devices with two ASG220s (HA) at the Data Center. One branch office just has employees, so that one is fine. The second branch office currently houses the Small Business Server and a PBX phone requiring SIP. The SBS will be moved to the data center in a week or two, but the PBX was supposed to stay in this office. According to Astaro support, I need to point any services to the data center, then create my DNAT and rules and pass the traffic from the data center to the resource behind the RED at the remote office. Conversely, I can get two static IP addresses and put the RED on one and a router on the other (or put the RED behind the current router).
With that being said, here is my feature request. Make the RED, when configured with a static IP address, able to be configured for DNAT just like a static IP configured on the ASG so we can pass traffic sent to remote sites into resources located at those remote sites.