For details on cookie usage on our site, read our Privacy Policy
Destination NAT Round Robin for Load Balance Traffic for Web Server
- LIVEcommunity
- Discussions
- General Topics
- Destination NAT Round Robin for Load Balance Traffic for Web Server
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-08-2022 08:06 PM
I have 3 web servers which have 3 different static ip.
.11.12.13 I follow below guide try to load balance the traffic for all 3 web servers.
Configure Destination NAT Using Dynamic IP Addresses (paloaltonetworks.com)
I already did those steps but instead of using FQDN, we use 3 IP address (192.168.x.11, .12 and .13). into an address group and put it into the translated packet as Dynamic IP (with session distribution) as round robin
session distribution method. With this done, we still see the traffic translated into only 1 IP address which is 192.168.x.11.
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-10-2022 12:41 AM
The configuration seems to be correct, but the important question still is how do you access those servers? Do you already have random users accessing those servers and all of them are being sent to that one server? Based on those hitcounts, it appears that it is already in production, is that correct?
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-09-2022 04:32 AM
Could you please share a screenshot of your configuration? Are you trying to connect to 192.168.x.11 from a different host or at least private window?
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-09-2022 08:21 PM
My NAT policy as below
Source Zone: WAN
Dst Zone:WAN
Dst Interface: Any
Source Addr:10.239.x. 3
Dst Addr: 10.250.x.3
Service:tcp_3333
translated packet
Src translation : none
Dst Translation:
Dynamic IP
Translated Address:
(webserver address group)
192.168.x.11, .12 and .13
Translated port:None
Session Distributed method: Round robin
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-09-2022 11:37 PM
The translated address is a address group inside have
192.168.x.11
192.168.x.12
192.168.x.13
- Create policies from flows in file excel/csv to a Panorama particular - Device Group in General Topics
- Traffic stops hitting when one of two FQDN objects in policy not resolvable in General Topics
- Global Protect in General Topics
- Prioritize Tunnel Static Route over L2 physical route in General Topics
- How to retain Public IP Address Assigned to a host on VMSeries Firewall on Azure in VM-Series in the Public Cloud
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
