Dynamic 1:1 NAT on the Palo Alto interface.

[nson2139]

We are looking at some method where we can dynamically NAT subnets behind the Palo Alto Firewall to pick an IP address from the network defined on the external interface.

e.g. I have the external IP address network defined as 10.100.100.0 /24. The IP address 10.100.100.20 is defined as the IP of the external interface.

In the internal network we have about a few networks defined i.e. 10.10.10.0/24, 10.10.20.0/24, 10.10.30.0/24. We are looking at some configuration where we can do some dynamic NATting for these internal networks to pick up some IP address from the External network defined.

Thanks!!

N.

[BPry]

@nson2139,

I guess I'm missing what you are actually asking for; wouldn't this simply be a NAT policy with the proper addresses defined in the policy? 

[reaper]

hi @nson2139

like so (dynamic-ip instead of dynamic ip+port):

here's more info:

https://live.paloaltonetworks.com/t5/Tutorials/Getting-Started-Network-Address-Translation-NAT/ta-p/...