Source NAT Dynamic Pool mapping for inbound traffic

Ajay358 — Thu, 06 Jun 2024 18:59:45 GMT

I have configured Dynamic NAT on PA- 3260 where source address is a VLAN with a certain IP range mapped to a NAT pool (Many-to-Many NAT Policy according to PA documentation). NAT policy is working fine according to the session logs. I can see the packet IP translation taking place for the outbound traffic. The concept I wish to understand here is what's the address translation mechanism for the inbound packets. How does the cisco router know where the incoming packet is supposed to be forwarded?

Before PA was set up NAT was enabled on the Cisco router but now since, there is an additional hop now becuase of the introduction of PA it has become somewhat confusing for me to understand.

Host <-------------------------PA-3260 <-----------------------Cisco Router <------(Inbound Packet)-----------------Internet.

NATing is configured on the PA device.

Re: Source NAT Dynamic Pool mapping for inbound traffic

Raido_Rattameister — Thu, 06 Jun 2024 19:14:28 GMT

Cisco router only routes and does not do NAT?

You need to add route into Cisco to send traffic towards Palo IP.

topic Source NAT Dynamic Pool mapping for inbound traffic in General Topics

Source NAT Dynamic Pool mapping for inbound traffic

Re: Source NAT Dynamic Pool mapping for inbound traffic