No hits on source NAT

cancel
Showing results for 
Search instead for 
Did you mean: 
Palo Alto Networks Approved
Palo Alto Networks Approved
Community Expert Verified
Community Expert Verified

No hits on source NAT

L0 Member

Really basic setup here.  I'm just trying to get a lab setup going but I'm not able to get out to the Internet.  I'm not seeing any hits on my NAT policy and therefore no hits no my security policies.  To my knowledge this is setup correctly.  I can ping the LAN/WAN interfaces just fine.

 

PA-820

10.1.0

WAN is ethernet1/1

LAN is ethernet1/2 

 

NAT-config.PNG 

Is there anything I can use to troubleshoot?  I have a box running where I can ping the DS-LAB gateway but cannot ping out to 8.8.8.8.  Session count is 0.

1 ACCEPTED SOLUTION

Accepted Solutions

L4 Transporter

There are a few things to look at, not exactly sure how you have set everything up. But off the top of my head:

1) In the Translated Packet tab of your NAT policy, under the Source Address Translation, have you set an IP to be translated to? I see the translation type and interface, but not the address in the screen shot.

 

2) Do you have a Security Policy that allows traffic from DS-LAB to INTERNET?

 

3) Do you have a default route in your routing table for the destination out to the internet?

View solution in original post

2 REPLIES 2

L4 Transporter

There are a few things to look at, not exactly sure how you have set everything up. But off the top of my head:

1) In the Translated Packet tab of your NAT policy, under the Source Address Translation, have you set an IP to be translated to? I see the translation type and interface, but not the address in the screen shot.

 

2) Do you have a Security Policy that allows traffic from DS-LAB to INTERNET?

 

3) Do you have a default route in your routing table for the destination out to the internet?

L0 Member

Thanks!  It was the static route.  I forgot since the WAN was static I needed to add that manually.  I was used to using DHCP which would install the route automatically.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!