Destination NAT with multiple server.

[Jafar_Hussain]

Hello Team,

I have configured destination NAT in my environment with one server.

Now i can see the number of users increases and too much traffic i am getting in one server, so i want to configure 2 more server with the same services.

For example:-

If user 1 want to connect my destination it will translate to 10.0.0.1

If user 2 want to connect my destination it will translate to 10.0.0.2

If user 3 want to connect my destination it will translat to 10.0.0.3

please let me know how i can achieve this requirement.

[SutareMayur]

@Jafar_Hussain,

Currently you can't achieve it on Palo Alto. You need something like Load Balancer to achieve this requirement.

Mayur

[Jafar_Hussain]

@SutareMayur 

Thanks for your reply.

I have gone through these documents and found this:-

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/networking-features/session-dist-dn...

can we create like this create a one address object with interface range (10.0.0.1-10.0.0.3) and the same object we can allow in destination NAT and we will select the round-robin method?

Please suggest this.

[SutareMayur]

@Jafar_Hussain,

Yes you can give a try, as per the article it should work. I haven't tried it yet.

Mayur

[Wagdy-Maher]

 you can achive this using user-id as a source address in the nat and create a policy to allow this traffic.