I am getting the error "Mismatch static-ip address range between original address and translated address" when I try to create a corporate outbound NAT rule. The rule is as follows:
trust -> untrust -> src (10.0.0.0/8) -> dest(any) -> src trans static IP (x.x.x.x/32) bi-directional (no)
Hi,
Static NAT is usually used for one-to-one addresses. Since your source is a /8 and destination /32, that can't work.
What you are probably trying to do is have your /8 network NAT to that single public address when goign to the internet, and to do that, you need dynamic NAT, not static NAT.
Your NAT translation object should look like this, but with the IP address configured. I can't do that on my firewall because the IP address of my internet facing interface is dynamic.
Hi,
Static NAT is usually used for one-to-one addresses. Since your source is a /8 and destination /32, that can't work.
What you are probably trying to do is have your /8 network NAT to that single public address when goign to the internet, and to do that, you need dynamic NAT, not static NAT.
Your NAT translation object should look like this, but with the IP address configured. I can't do that on my firewall because the IP address of my internet facing interface is dynamic.
