NAT Rule Error: Mismatch Static IP
58329
Created On 09/26/18 13:51 PM - Last Modified 04/23/20 21:48 PM
Symptom
During commit Error message "Mismatch static-ip address range between original address and translated address" is displayed.
device:
nat rule 'NAT_rule':
Mismatch static-ip address range between original address and translated address
Failed to parse nat policy
Commit failed
Environment
- Any PAN-OS.
- Palo Alto Firewall.
- Static NAT configured.
Cause
Non /32 mask used to translate one static IP. This is not allowed or supported.
Resolution
Additional Information
If Static NAT is not needed one can use dynamic ip translation to allow many-to-one translation.