topic Re: NAT from private to public in General Topics

NAT from private to public

Shuttermed — Tue, 23 Jan 2018 20:16:54 GMT

With PAN - if I have a client who wants to his a public IP address when their traffic passes through the inside/private interface - what would the NAT look like? E.g. say outside/untrusted IP address is 67.1.1.1 and NATs 1:1 to 10.10.4.5 which is reached via the inside/private interface for any port.

Now a user at 10.10.40.47 wants to hit 67.1.1.1 and their path takes them to the inside/private interface of the PAN. What NAT configuration would allow this to work? Some kind of hairpin? Any insight appreciated.

Re: NAT from private to public

gwesson — Tue, 23 Jan 2018 22:45:23 GMT

Yep, it's called a U-Turn NAT here instead of hairpin, but it's the same concept. Here's a detailed write-up on how to set it up:

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-U-Turn-NAT/ta-p/61889

Re: NAT from private to public

Shuttermed — Tue, 23 Jan 2018 22:55:33 GMT

Thank you.