PAT/NAT rule not working

[M.Allen]

Hi I am looking to create a PAT for an internal server which will use the /30 public IP of the Palo outside interface and port 16385 to be reachable. The below scenario:

PAT/static NAT towards the private IP of O-IntercomSRV-01 (the intercom server) using UDP port 16385 from sources OG-Parking-Intercom-Dest source port 16385.

O-IntercomSRV-01 - 192.168.1.9

OG-Parking-Intercom-Dest - O-Parking-Intercom-Dest-01 - O-Parking-Intercom-Dest-02 (public IPs)

Is this how I would set this up?

 

I am getting an error message when committing..

[M.Allen]

Can anyone advised on this, like hitting my head against a brick wall atm

[M.Allen]

Still not able to get this working..

[MP18]

@M.Allen 

Please see this Commit NAT Error: Mismatch of destination address translation range"" (paloaltonetworks.com)

and 

Error message: “Mismatch of destination address translation ran... - Knowledge Base - Palo Alto Netw...

Regards

[reaper · Accepted solution]

the object used in the pre-NAT destination probably has a /30 subnet?  and the post-nat destination is a /32, this is a faulty NAT operation

also, it looks like you're setting up an inbound rule: an inbound NAT (or PAT) rule should be untrust to untrust as the destination address (pre-nat) is on the untrust interface

so your rule should read:

original packet: from untrust to untrust, source parking-OG destination public-IP service 16385

translated packet: static ip, destination 192.168.1.9