topic Re: Static Bi-Directional NAT translation in General Topics

Static Bi-Directional NAT translation

Ben-Price — Mon, 26 Jul 2021 07:33:35 GMT

Hi,

Is it possible to have 2 static bi-directional NAT rules configured for the same public IP address e.g. mapping one public IP address to 2 internal servers using the below linked config?

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/configure-nat/enable-bi-directional-address-translation-for-your-public-facing-servers-static-source-nat.html

I believe this type of config is only possible using destination NAT one-to-many, but I just wanted to check with the community.

Re: Static Bi-Directional NAT translation

SutareMayur — Mon, 26 Jul 2021 11:37:09 GMT

Hi @Ben-Price ,

If it is for different services/ports, you can allow it but you need to define separate NAT for each sources. But keeping Bi-Directional Static NAT policy with specific port will also apply it for the outbound traffic while doing source NAT and few cases won't work as per your requirement. Better, you can have separate NAT for source and destination translations to have more granularity. For source translations, you can easily have one public IP for multiple servers but when it comes to inbound traffic, we need to map it based on the inbound port/services specifically.

Hope it helps!

Re: Static Bi-Directional NAT translation

Ben-Price — Mon, 26 Jul 2021 23:25:17 GMT

Thanks @SutareMayur that's what I thought. I appreciate your quick response.