topic Destination NAT Mismatch error in General Topics

Destination NAT Mismatch error

smithkopel — Mon, 23 Jan 2012 23:40:00 GMT

Hi I'm configuring a new PA-500 and have it working for source NAT going from Tusted to Internet. Now I want to create a destination NAT rule to allow traffic in to a web server located on the trusted net. I have created a rule almost exactly as it shows in the Admin guide but I'm getting the error - “nat rule “Incoming Web”: Mismatch destination address translation range” the settings are as follows:

Name: Incoming Web

Tag: None

Source Zone: Untrusted

Destination Zone: Untrusted

Destination Interface: none (The manual shows ‘any’ but I don’t have that option)

Source Address: Any

Destination Address: External FW IP

Service: HTTP

Source Translation: None

Destination Translation: address: Internal Web Server IP

I can't seem to find anything on these forums relating to this error.

Any thoughts?

Thanks,

Kenton

Re: Destination NAT Mismatch error

snisar — Tue, 24 Jan 2012 03:51:33 GMT

Please select the interface where External FW IP is configured as "Destination Interface"

Re: Destination NAT Mismatch error

smithkopel — Tue, 24 Jan 2012 16:25:23 GMT

Thanks @snisar, I have already tried that (and tried again after your suggestion) but I still get the same error.

Kenton

Re: Destination NAT Mismatch error

smithkopel — Wed, 01 Feb 2012 16:47:06 GMT

It turns out this was due to a misconfiguration in the IP address of the target server.

Re: Destination NAT Mismatch error

mikand — Wed, 01 Feb 2012 19:14:12 GMT

Thanks for returning with followup of the result 🙂

Re: Destination NAT Mismatch error

jeffrolc — Thu, 26 Apr 2012 04:37:01 GMT

I am getting the same error but my public ip is dynamic. The "Mismatch destination address translation range" goes away if I put a static ip address in the orginial packet, destination address field like you normally would but I need to leave this as any since it is dynamic. Any Ideas?

Re: Destination NAT Mismatch error

MP18 — Mon, 29 Jul 2024 03:40:04 GMT

@jeffrolc

Please see this article.

Commit NAT Error: Mismatch of destination address translation range"" (paloaltonetworks.com)

and

Error message: “Mismatch of destination address translation ran... - Knowledge Base - Palo Alto Networks

Regards