For details on cookie usage on our site, read our Privacy Policy
Many-to-Many NAT (Both Direction)
- LIVEcommunity
- Discussions
- General Topics
- Many-to-Many NAT (Both Direction)
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Many-to-Many NAT (Both Direction)
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-09-2021 06:01 AM
Hi Everyone,
I am struggling to solve a problem NAT issue and need some help. I need to configure May-to-Many NAT on Palo Alto Firewall between two data centers. I have three /25 IPv4 subnets which needs to be mapped to three /25 subnets (subnet to subnet basis if not one to one IP basis) and three IPv6 /40 subnets needs same treatment. Traffic is expected to come from both direction inside to outside and outside to inside on specified TCP, UDP and ICMP ports. I have PA3220 which has been upgraded to PAN OS 9.0 and I will applicate if you can suggest best way to achieve this? Do I need to consider any resource limitation as I have three /25 IPv4 and three /40 IPv6 subnets which can overwhelm the resource?
Thanks
RT
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-09-2021 08:00 AM
Hello,
How are the two data centers connected? Just curious as to why you need the NAT?
Regards,
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-09-2021 08:34 AM
Yes they are connected but part of Migration work and removing Overlapping addresses requires NAT.
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-09-2021 08:44 AM
Hello,
Please check out these articles and see if they help out.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLTlCAO
Regards,
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-09-2021 08:53 AM
Thank you for the prompt reply. I will check your suggested solution. In the meantime please could you tell me if it possible to solve by NAT or its impractical?
- Prisma direct access to Azure in General Topics
- SAML for direct login on many firewalls in General Topics
- Prioritize Tunnel Static Route over L2 physical route in General Topics
- CSP access in General Topics
- Global Protect Pre-deployment with AlwaysOn and Network Connection Enforcement in GlobalProtect Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
