topic Re: PAN-OS Bi-Directional NAT and Nintendo Online Gaming in General Topics

PAN-OS Bi-Directional NAT and Nintendo Online Gaming

pjohnson1 — Mon, 08 Feb 2016 12:16:24 GMT

I have a couple of Nintendo consoles on the network which would like to connect for online gaming.

I am on a cable connection so am using Dyndns lookup for my external-IP.

I have the following Bi-Directional NAT policies configured.

Application Group

Security Policy

NAT Policy

It seems to work with the Wii U but not with the 3DS.

Any assistance will be much appreciated.

As a last resort I could dig out my old Draytek router for these hosts but would prefer not too...

Thanks.

Kind regards

vkalal — Mon, 08 Feb 2016 12:40:39 GMT

> If you can take a packet capture and also see the traffic logs so see what's really happening with the traffic

> And then you can make the required changes in the NAT/Security Policies

> Instead of creating bi-directional try creating separate NAT policy for out going traffic and the incomming traffic

tsrivastav — Mon, 08 Feb 2016 13:29:02 GMT

>>>please specify which zone the internal-wiiU belongs

You can see the same by the command

test routing fib-lookup virtual-router default ip <ip address>

Please see the zone of the ip address by the above command and make Nat rule accordingly

Thank You

reaper — Mon, 08 Feb 2016 13:59:56 GMT

Hi There

to make sure a bidirectional NAT policy works as expected, the proper formatting would need to be trust to untrust

hope this helps

pjohnson1 — Tue, 09 Feb 2016 12:32:10 GMT

Hello.

Thanks to all responding.

I tried the following but no luck...

If I click on 'Highlight Unused Rules', the Bi-Directional NAT rules are highlighted so the traffic is not even hitting those NAT rules.