topic Re: Having an issue with NAT extension cannot be enabled for the device having support in Prisma SD-WAN Discussions

Having an issue with NAT extension cannot be enabled for the device having support

rewarsuresh — Sun, 09 Oct 2022 16:44:17 GMT

Hello Experts,

I have had an issue with ION 2K device and unable to enable the NAT rule in the ION 2K device, Receiving the following error,

Can you please help me to fix this issue ?

Failed to save "PhoNATt". - NAT extension cannot be enabled for the device having support for nat policy.

Re: Having an issue with NAT extension cannot be enabled for the device having support

rewarsuresh — Sun, 09 Oct 2022 16:47:39 GMT

I am attaching the picture of error

Re: Having an issue with NAT extension cannot be enabled for the device having support

kn — Sun, 09 Oct 2022 17:21:11 GMT

Hi,

This NAT function will work prior to ION software version 5.2.x, if the current device software version is 5.2.1 or above you might face this issue.

Link to release notes changes in behavior.

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/5-2/prisma-sd-wan-ion-release-notes/prisma-sd-wan-ion-release-5-2/changes-to-default-behavior-in-prisma-sd-wan-ion-release-5-2/changes-to-default-behavior-in-prisma-sd-wan-ion-release-5-2-1

Do let us know if you need any further information.

Re: Having an issue with NAT extension cannot be enabled for the device having support

rewarsuresh — Sun, 09 Oct 2022 17:23:31 GMT

@kn what is the solution now ? in order to resolve the issue ? thanks in advance

Re: Having an issue with NAT extension cannot be enabled for the device having support

kn — Sun, 09 Oct 2022 17:30:14 GMT

Hi @rewarsuresh

The below link will help with configuring the NAT policy for devices with software version 5.2.X and above. If you still need any further Palo alto is always happy to help you 🙂

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-nat-policies

-kn

Re: Having an issue with NAT extension cannot be enabled for the device having support

rewarsuresh — Sun, 09 Oct 2022 17:53:11 GMT

@kn Is there any option now to migrate all the existing NAT policies to NATstack policies? or do I need to configure manually all the policies? Your help will be appreciated

Re: Having an issue with NAT extension cannot be enabled for the device having support

kn — Sun, 09 Oct 2022 18:04:35 GMT

@rewarsuresh existing policies need to be migrated manually, and as far as I know, we don't have any tool to address it with automation.

Re: Having an issue with NAT extension cannot be enabled for the device having support

rewarsuresh — Sun, 09 Oct 2022 18:07:51 GMT

@kn Thank you for your help. appreciated.