Double NAT

majo44 — Fri, 12 May 2017 14:34:38 GMT

Hi!
we have a couple of customer who use paloalto firewalls. We have always problem to connect two accesses through NAT via paloalto. We usually use cisco meraki and the communicate on the higher port numbers. It always work when we have one site that are behind a NAT but when we move the device behind a NAT, it fails.

Like this:

1) NOK: lan<->MX<->NAT<->internet<->NAT<->MX<->lan

2) OK lan<->MX<->internet<->NAT<->MX<->lan

Everytime we have this issue it end with that the customer use paloalto firewalls.

Can someone here explain what it is? or have a configuration solution in paloalto taht can solve this?

Re: Double NAT

Raido_Rattameister — Tue, 16 May 2017 22:21:09 GMT

Can you explain a bit more or draw a diagram with example IP's?

Do those clients have multiple public IP's?

Do you have bi-directional NAT so that traffic destined to this device and sourcing from this device use same IP?

topic Double NAT in General Topics

Double NAT

Re: Double NAT