Static NAT between virtual routers

JohnOlav — Thu, 04 Oct 2018 09:53:05 GMT

Hi,

I'm going to migrate a Juniper SRX firewall with a Palo Alto VM-500 firewall.

The case: The Juniper firewall is configured with multiple virtual routers. Between this routers we can static NAT subnets. As showed in the picture below, we have 2 virtual routers. If Subnet 192.168.1.0/24 behind VR A should reach Subnet 192.168.2.0/24 behind VR B, we have a static NAT from zone A that NAT'ing 172.16.2.0/24<->192.168.2.0/24 to VR B. You can then use 172.16.2.x from VR A to reach the 192.168.2.x in VR B.
This is done because of a subnet overlap (192.168.2.0/24 in VR A is bound to a VPN tunnel)

How can I solve this in the Palo Alto?

Re: Static NAT between virtual routers

markus_w — Thu, 04 Oct 2018 10:58:59 GMT

I dont know it exactly, but maybe this link can help. It is about NAT between 2 vsys with 2 VR's. Not exactly your setup but maybe you can get some infos.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldgCAC

topic Static NAT between virtual routers in General Topics

Static NAT between virtual routers

Re: Static NAT between virtual routers