Problem of PA-220 behind another router

Reply
L2 Linker

Problem of PA-220 behind another router

Got a PA-220 to test.

Want to setup something like below:

Internet <-> Juniper SSG-140 (GW:192.168.1.1) <-> PA-220 <-> user's device (172.16.1.0/24)

 

1. The SSG-140 can reach internet

2. The PA-220 external port (192.168.1.100) can reach internet too

3. The PA-220 internal (172.16.1.0/24) cannot reach internet

4. The PA-220 internal (172.16.1.0/24) cannot ping the devices in 192.168.1.0/24

 

Anyone know what configuration can make the subnet 172.16.1.0/24 reach internet and the device in 192.168.1.0/24 ?


Accepted Solutions
L7 Applicator

You should either add a route on the SSG-140 to route 172.16.1.0/24 to 192.168.1.100, or you'll need to enable NAT on the PA-220

 

that will most likely solve your issue

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post


All Replies
L7 Applicator

You should either add a route on the SSG-140 to route 172.16.1.0/24 to 192.168.1.100, or you'll need to enable NAT on the PA-220

 

that will most likely solve your issue

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374

View solution in original post

L2 Linker

Thanks reaper.

1 x NAT policy + 1 x Security policy did the trick

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!