<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to onpen port to access a service inside in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-onpen-port-to-access-a-service-inside/m-p/21496#M15696</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Your second NAT rule is incorrect for this scenario (to only allow access from outside, you can remove 'L3_LAN' as the source zone here). You need a Destination NAT to allow users from outside to access the public camera, so no source translation necessary as well.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You will need a rule like below:&lt;/P&gt;&lt;P&gt;"public access to server" {&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; from untrust-L3;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; source any;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; to untrust-L3;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; to-interface&amp;nbsp; ;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; destination &amp;lt;public-ip&amp;gt;;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; service any/any/any;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate-to "dst: private-ip:port";&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here's a good document that explains about configuring NAT in different scenarios:&lt;/P&gt;&lt;P&gt;&lt;A __default_attr="1517" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"&gt;&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope that helps!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Aditi&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 09 Apr 2013 04:59:05 GMT</pubDate>
    <dc:creator>apasupulati</dc:creator>
    <dc:date>2013-04-09T04:59:05Z</dc:date>
    <item>
      <title>how to onpen port to access a service inside</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-onpen-port-to-access-a-service-inside/m-p/21495#M15695</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;hi all&lt;/P&gt;&lt;P&gt;i have a service&amp;nbsp; camera at : 172.168.2.121:8181&lt;/P&gt;&lt;P&gt;I want access from internet outside.&lt;/P&gt;&lt;P&gt;I creat a service and Nat&lt;/P&gt;&lt;P&gt;but not success&lt;/P&gt;&lt;P&gt;&lt;IMG alt="nat.jpg" class="jive-image-thumbnail jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/6220_nat.jpg" width="450" /&gt;&lt;IMG alt="service.jpg" class="jive-image-thumbnail jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/6224_service.jpg" width="450" /&gt;&lt;/P&gt;&lt;P&gt;pls help me&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 09 Apr 2013 04:32:44 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-onpen-port-to-access-a-service-inside/m-p/21495#M15695</guid>
      <dc:creator>dat.tran</dc:creator>
      <dc:date>2013-04-09T04:32:44Z</dc:date>
    </item>
    <item>
      <title>Re: how to onpen port to access a service inside</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/how-to-onpen-port-to-access-a-service-inside/m-p/21496#M15696</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Your second NAT rule is incorrect for this scenario (to only allow access from outside, you can remove 'L3_LAN' as the source zone here). You need a Destination NAT to allow users from outside to access the public camera, so no source translation necessary as well.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You will need a rule like below:&lt;/P&gt;&lt;P&gt;"public access to server" {&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; from untrust-L3;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; source any;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; to untrust-L3;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; to-interface&amp;nbsp; ;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; destination &amp;lt;public-ip&amp;gt;;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; service any/any/any;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate-to "dst: private-ip:port";&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here's a good document that explains about configuring NAT in different scenarios:&lt;/P&gt;&lt;P&gt;&lt;A __default_attr="1517" __jive_macro_name="document" class="jive_macro jive_macro_document" href="https://live.paloaltonetworks.com/"&gt;&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope that helps!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Aditi&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 09 Apr 2013 04:59:05 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/how-to-onpen-port-to-access-a-service-inside/m-p/21496#M15696</guid>
      <dc:creator>apasupulati</dc:creator>
      <dc:date>2013-04-09T04:59:05Z</dc:date>
    </item>
  </channel>
</rss>

