Destination NAT with Port Range

Tulasi — Tue, 22 Oct 2019 08:43:10 GMT

Hi !

We are trying to configure Destination NAT rule for a VC device on Palo Alto 820 NGFW. we need to allow range of TCP ports(Ex:3000-3050) but we could not find the option to configure the port range under the translated tab. find the below requirement for your reference.

Original Packet: Src.IP:Any, Dst.IP:1.1.1.1, DstPortrange: 3000-3050

Translated Packet: Src.IP:original, Dst.IP:192.168.10.1 DstPort Range: 3000-3050

Please let me know if anybody has gone through this scenario with the solution

Re: Destination NAT with Port Range

BruceBennett — Tue, 22 Oct 2019 12:53:32 GMT

Unless you are you trying to change the port as part of the translation, you can define the port range as a services object, and then refer to it on the "Original Packet" page of the NAT rule, where you would identify the destination zone and interface. Then your NAT rule will only apply to traffic going to that destination NAT address when it is bound for those ports.

topic Destination NAT with Port Range in General Topics

Destination NAT with Port Range

Re: Destination NAT with Port Range