Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Problem of PA-220 behind another router

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Problem of PA-220 behind another router

L3 Networker

Got a PA-220 to test.

Want to setup something like below:

Internet <-> Juniper SSG-140 (GW:192.168.1.1) <-> PA-220 <-> user's device (172.16.1.0/24)

 

1. The SSG-140 can reach internet

2. The PA-220 external port (192.168.1.100) can reach internet too

3. The PA-220 internal (172.16.1.0/24) cannot reach internet

4. The PA-220 internal (172.16.1.0/24) cannot ping the devices in 192.168.1.0/24

 

Anyone know what configuration can make the subnet 172.16.1.0/24 reach internet and the device in 192.168.1.0/24 ?

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

You should either add a route on the SSG-140 to route 172.16.1.0/24 to 192.168.1.100, or you'll need to enable NAT on the PA-220

 

that will most likely solve your issue

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

You should either add a route on the SSG-140 to route 172.16.1.0/24 to 192.168.1.100, or you'll need to enable NAT on the PA-220

 

that will most likely solve your issue

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Thanks reaper.

1 x NAT policy + 1 x Security policy did the trick

  • 1 accepted solution
  • 1997 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!