Mapping Public IP to Private IP (Internal Server)

[christopherlo]

Hello!

So, i've got an internal server say (10.0.10.1) that needs to point to a public ip (64.60.16.18). I've been following the documentation and have yet to get it working. I have followed this guide for how to "Translate Internal Client IP Addresses to your Public IP Address"

https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/getting-started/configure-nat-polici...

My current nat policy is set to:

Trust to Untrust | Any Destination | Any interface | Source add: 64.60.16.18 | Any Service | source trans: none | Destination trans: 10.0.10.1

I have a policy in place to allow traffic from the Untrust zone to access the 10.0.10.1 address located in the Trust Zone

Can anyone point me in the right direction on how to properly map a server to a public ip?

Thanks!

Thanks!

[pulukas]

Looks like you have the zones backwards.  you have the public ip source which would be presumably the untrust zone inbound to your server and the destination the private address in trust.

To allow the connections into the server you will also need to create the security policy to permit the applications or ports you want to allow in to the server as well.

[TranceforLife]

Hi,

Pulukas right. 

For the NAT config: 

For the Security policy config: