topic Multiple bidirectional NATs with multiple public IPs in General Topics

Multiple bidirectional NATs with multiple public IPs

cstech — Sat, 23 Aug 2014 00:26:21 GMT

Hello,

I have /26 public IP addresses (164.67.80.65 - 164.67.80.126). I bound ethernet 1/1 to 164.67.80.77/24. Then I created a bidirectional NAT connecting 164.67.80.77 to 192.168.1.77. Works great. Now I want to setup a second bidirectional NAT: 164.67.80.78 to 192.168.1.78

Question:

Can I do this without using just the one external interface? Can I "add" 164.67.80.78/24 to interface ethernet 1/1, eventhough it already has an address on the same subnet 164.67.80.77/24?

Thank you,

Chris

Re: Multiple bidirectional NATs with multiple public IPs

HULK — Sat, 23 Aug 2014 00:30:36 GMT

Hello Chris,

As per my understanding, you cannot configure same subnet IP address in multiple interfaces. A firewall is supposed to segregate different broadcast domain. So, you can not tag same broadcast domain into 2 interfaces.

Thanks

Re: Multiple bidirectional NATs with multiple public IPs

HULK — Sat, 23 Aug 2014 00:36:50 GMT

One moment , you need not to configure 164.67.80.78/xx ip on an another interface. Once you will configure a NAT rule for IP address 164.67.80.78, the PAN firewall is intelligent enough to do PROXY ARP for that IP address since the interface is already configured with that subnet.

Re: Multiple bidirectional NATs with multiple public IPs

cstech — Sat, 23 Aug 2014 00:39:46 GMT

Hulk,

You say "same subnet IP address in multiple interfaces" but I am not talking about multiple interfaces. I am talking about only one interface: "ethernet1/1".

Are you saying that, as per your understanding, it is impossible to configure multiple IP address on the same subnet to a single interface?

Thank you again,

Chris

Re: Multiple bidirectional NATs with multiple public IPs

HULK — Sat, 23 Aug 2014 00:42:37 GMT

Please ignore my first update.

You only need to configure a NAT rule for IP address 164.67.80.78. Everything else will be taken care by PAN firewall. ( you need not to configure that .78 IP to a physical interface).

Thanks

Re: Multiple bidirectional NATs with multiple public IPs

cstech — Sat, 23 Aug 2014 00:58:49 GMT

Thanks again, works great!

Re: Multiple bidirectional NATs with multiple public IPs

HULK — Sat, 23 Aug 2014 01:00:41 GMT

You are welcome sir.