Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

NAT allocation during a pool configuration.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

NAT allocation during a pool configuration.

L3 Networker

Team,

We have a NAT pool configured for one of the ongoing requirements. Is there a way to force this pool to allocate IP address from start to end as per new requests come in?

 

e.g. NAT pool configured is 10.10.10.1 to 10.10.10.10

IP source is anything between 192.168.10.1 to 192.168.10.10

 

We noticed that if the traffic source is 192.168.10.2 it could take an IP from anywhere in the NAT pool. I want to force it to take a first IP in the pool.

 

Also is it possible to configure something which keeps the last octet static? (this may be too much to ask.)

 

 

Thanks!!!

N.

4 REPLIES 4

Cyber Elite
Cyber Elite

@nson2139,

So essentially regardless of the source IP in that range, you want the firewall to NAT with the first available IP in the pool? That really isn't how the NAT process on the firewall is designed, and I'm not sure you'll be able to get this to work at all. 

L7 Applicator

@nson2139

Maybe I do not understand your question, but as long as your effective source and your source NAT IP range are the same soze, then you could use static NAT...

@Remo,

My understanding of the question was that it didn't matter what the source IP was within the given range, the NAT was desired to be the first unused NAT address within the given range. 

I agree though for something like this a simple static NAT rule would be a bit more resonable as you are mapping 10 different source addresses to 10 different NAT addresses and I presume using Dynamic IP. If a static NAT was setup then you would know exactly what address what going to get which NAT address and you wouldn't have to worry about the way the Dynamic IP process chooses a NAT address out of order. 

L7 Applicator

@BPry

I admit, I never configured it with 10 addresses. But when I used a /24 or /25 as source IP and the same network size as source NAT, the last octett remained the same.

  • 2492 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!