ONE External IP to MANY Internal IP NAT

[greeng]

I believe I know the answer after looking around.

We have NATs that work fine when it is 1to1.

But what about  1 External IP that represents many Internal Hosts?  We have multiple websites that when you do a lookup in DNS, they all point to a singular public facing IP.  That public facing IP is represented by our ISA.

External                                             Internal

mysite.org - xxx.xxx.67.18          >  192.168.1.20

mysite1.org - xxx.xxx.67.18        >  192.168.1.21

mysite2.org - xxx.xxx.67.18        >  192.168.1.22

Could this be done by changing addresses (Objects > Addresses) to use FQDN instead of IP?

So the thought there would be:

2 New Objects

------------------

Name: mysite.org (outside) - FQDN: mysite.org

Name: mysite.org (inside) - IP Address: 199.168.1.20

NAT Policy

-----------------

Src: untrust

Dst: untrust

Src Addr: Any

Src Addr: mysite.org (outside)

Dst Addr Translation: mysite.org (inside)

Security Policy

-------------------

Src: Any

Dst: mysite.org (outside)

Thoughts?

[sbabu]

Also you can use the below document for your reference

Understanding PAN-OS NAT

Page 19& 20

Thank you.

[Dz3015]

I agree with Hulk.

The only way you can do a "1 to many" NAT is via PAT.  You must set up separate ports for each connection.

[mivaldi]

This video tutorial will help you with the DNAT configuration.

Video Link : 1550