topic Re: NAt problem with paloalto in General Topics

NAt problem with paloalto

lildeniz — Sat, 20 Apr 2013 22:39:16 GMT

Hi,

i have 3 zone trust untrust and dmz

dmz:91.239.204.0/24

trust:10.0.0.0/8

untrust: anything

when i try to nat from untrust to trust 91.239.204.22--->10.1.1.34 packet goes to dmz interface...i think problem is nat before routing or routing before nat because dmz and nated interface same subnet group...

How can i resolve this problem.?

Re: NAt problem with paloalto

UhMayYeah — Mon, 22 Apr 2013 05:58:50 GMT

So the traffic ingresses the firewall from the DMZ interface ?

Is there a reason why we need to continue using overlapping subnets in the same Virtual Router?

Can you please add the o/p of the following

>show interface logical

>show routing route

-Ameya

Re: NAt problem with paloalto

lildeniz — Mon, 22 Apr 2013 10:01:13 GMT

i fixed this problem with uturn nat...

regards