PAN-OS Bi-Directional NAT and Nintendo Online Gaming

[pjohnson1]

I have a couple of Nintendo consoles on the network which would like to connect for online gaming.

I am on a cable connection so am using Dyndns lookup for my external-IP.

I have the following Bi-Directional NAT policies configured.  

Application Group

Security Policy

NAT Policy

It seems to work with the Wii U but not with the 3DS.

Any assistance will be much appreciated.  

As a last resort I could dig out my old Draytek router for these hosts but would prefer not too...

Thanks.

Kind regards

[vkalal]

> If you can take a packet capture and also see the traffic logs so see what's really happening with the traffic

> And then you can make the required changes in the NAT/Security Policies

> Instead of creating bi-directional try creating separate NAT policy for out going traffic and the incomming traffic

[tsrivastav]

>>>please specify which zone the internal-wiiU belongs

You can see the same by the command 

test routing fib-lookup virtual-router default ip <ip address>

Please see the zone of  the ip address by the above command and make Nat rule accordingly 

Thank You 

[reaper]

Hi There

to make sure a bidirectional NAT policy works as expected, the proper formatting would need to be trust to untrust

hope this helps

[pjohnson1]

Hello. 

Thanks to all responding.

I tried the following but no luck... 

If I click on 'Highlight Unused Rules', the Bi-Directional NAT rules are highlighted so the traffic is not even hitting those NAT rules.