topic Mapping Public IP to Private IP (Internal Server) in General Topics

Mapping Public IP to Private IP (Internal Server)

christopherlo — Tue, 27 Sep 2016 23:53:47 GMT

Hello!

So, i've got an internal server say (10.0.10.1) that needs to point to a public ip (64.60.16.18). I've been following the documentation and have yet to get it working. I have followed this guide for how to "Translate Internal Client IP Addresses to your Public IP Address"

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/getting-started/configure-nat-policies

My current nat policy is set to:

I have a policy in place to allow traffic from the Untrust zone to access the 10.0.10.1 address located in the Trust Zone

Can anyone point me in the right direction on how to properly map a server to a public ip?

Thanks!

Re: Mapping Public IP to Private IP (Internal Server)

pulukas — Wed, 28 Sep 2016 00:10:35 GMT

Looks like you have the zones backwards. you have the public ip source which would be presumably the untrust zone inbound to your server and the destination the private address in trust.

To allow the connections into the server you will also need to create the security policy to permit the applications or ports you want to allow in to the server as well.

Re: Mapping Public IP to Private IP (Internal Server)

TranceforLife — Wed, 28 Sep 2016 09:58:44 GMT

Hi,

Pulukas right.

For the NAT config:

For the Security policy config: