NAT from private to public

[Shuttermed]

With PAN - if I have a client who wants to his a public IP address when their traffic passes through the inside/private interface - what would the NAT look like? E.g. say outside/untrusted IP address is 67.1.1.1 and NATs 1:1 to 10.10.4.5 which is reached via the inside/private interface for any port.

Now a user at 10.10.40.47 wants to hit 67.1.1.1 and their path takes them to the inside/private interface of the PAN. What NAT configuration would allow this to work? Some kind of hairpin? Any insight appreciated.

[gwesson · Accepted solution]

Yep, it's called a U-Turn NAT here instead of hairpin, but it's the same concept. Here's a detailed write-up on how to set it up:

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-U-Turn-NAT/ta-p/61889

[Shuttermed]

Thank you.