topic Re: Round Robin NAT? in General Topics

Round Robin NAT?

iguarino — Fri, 28 Sep 2012 13:08:01 GMT

Hello,

I'm running PANOS 4.0.11 and I'd like to be able to set NAT to round robin between 2 servers in the DMZ. We would have a single public IP round robin NAT'd to two internal IPs. Is this possible on 4.0? How would I accomplish this?

Thanks,

Ian

Re: Round Robin NAT?

sdurga — Fri, 28 Sep 2012 16:39:10 GMT

Ian,

This is not possible on 4.0 or.4.1. I see that you would like to load balance between two internal servers with NAT, but this is not possible. You can create different NAT rules for different source ip addresses to get translated to different internal servers, but again this kind of setup is not true round robin load sharing.

Thanks,
Sandeep T

Re: Round Robin NAT?

msullivan — Fri, 28 Sep 2012 16:52:09 GMT

The obvious answer is to use round robin DNS, but since your asking the question, there must be some limitation on IP address resources. Still w/out the use of some sort of reverse proxy technology you would need more address space. Maybe you could get more IP space, or if you have any old servers laying around, run Linux and use Squid, Apache or any of the other free Linux packages available to do the heavy lifting for you.

If you have the money, F5 simply rocks the house

Cheers,

Mike

Re: Round Robin NAT?

iguarino — Fri, 28 Sep 2012 19:05:02 GMT

Thank you both for your replies. I am going to use an additional IP to resolve.