topic Re: Adding multiple IPs to external interface in General Topics

Adding multiple IPs to external interface

BobW — Sat, 14 Apr 2012 23:44:40 GMT

I am interested in adding all of the IPs from a range like x.y.z.40/28 to the external interface of the PAN.

The verbiage on the GUI makes it sound as if I need to add each IP individually.

Can I add a range as listed above by entering it as x.y.z.40/28 and if so, can I then NAT inbound by individual IPs in the range by referencing the individual IP?

Thanks,

Bob

Re: Adding multiple IPs to external interface

acaines — Sun, 15 Apr 2012 00:56:30 GMT

I don't believe you need to add the IPs to the firewall interface in order to use them in NAT policies. For example, inbound server connection with a policy that translates from a public address to a private address does not require that the public address is bound to the external firewall interface.

There's a thread that discusses this here: https://live.paloaltonetworks.com/message/5774