Many to many dynamic NAT (/24 to /24)

MarioMarquez — Wed, 10 Apr 2019 03:49:14 GMT

Is there a way to make a dynamic NAT rule that translates one /24 subnet to another /24 subnet work in both directions and map last octet to last octet? There's a way to do it in Sonicwall so if your natting a subnet to another it will make .20 on the real local subnet map to .20 on the natted subnet and do that for all IP's. The reason why I ask is because I have a VPN vendor that needs to initiate from their side of the tunnel to specific IP's on our side of the tunnel for printing. I know I can make it work by doing a one to one static Nat from the vendor to my side but I figured since sonicwall can do this maybe Palo can?

Re: Many to many dynamic NAT (/24 to /24)

reaper — Wed, 10 Apr 2019 05:24:32 GMT

dynamic (source) nat only does this in one direction

for it to work in both directions, both ends will need to apply dynamic nat on their end

our dynamic destination nat (PAN-OS 9.0) is set to loadbalance sessions. It relies on a hash/modulo so it doesn't preserve the last octet of the destination

topic Many to many dynamic NAT (/24 to /24) in General Topics

Many to many dynamic NAT (/24 to /24)

Re: Many to many dynamic NAT (/24 to /24)