topic Re: About DIPP Translated Address type (SNAT) in General Topics

About DIPP Translated Address type (SNAT)

iscott — Fri, 26 Jun 2020 17:03:10 GMT

Hello,

I have a question related to the DIPP translation. I understand de DIPP Interface. Many IP addresses can use the same IP. But I need to translate internal IP addresses to one specific IP different from the Outside Interface. If I use the DIPP Translated Address, it works similarly to Interface Translation?

So for example, Can I translate 15 internal IP addresses to one specific IP in this mode? The specific IP is not related to the Interface.

Regards,

Re: About DIPP Translated Address type (SNAT)

BPry — Fri, 26 Jun 2020 18:17:47 GMT

@iscott,

Yup. Just specify the addresses that you want to actually translate to that address as the source members and you should be all set.

Re: About DIPP Translated Address type (SNAT)

iscott — Fri, 26 Jun 2020 20:57:28 GMT

@BPry

So, Doesn't matter if I have a pool to one IP? The another factor is that the IP address is not related to a Palo Alto's interface and "configuration". It learns the IP through static route.

Regards,

Re: About DIPP Translated Address type (SNAT)

MP18 — Sat, 27 Jun 2020 04:07:35 GMT

@iscott

Yes it does not matter if you have pool to one IP translation.

Also it does not matter if that IP is not related to the PA interface an configuration.

I have setup where source gets Natted to IP that is not in PA.

Regards