Round Robin NAT?

[iguarino]

Hello,

I'm running PANOS 4.0.11 and I'd like to be able to set NAT to round robin between 2 servers in the DMZ.  We would have a single public IP round robin NAT'd to two internal IPs.  Is this possible on 4.0?  How would I accomplish this?

Thanks,

Ian

[sdurga · Accepted solution]

Ian,

This is not possible on 4.0 or.4.1. I see that you would like to load balance between two internal servers with NAT, but this is not possible. You can create different NAT rules for different source ip addresses to get translated to different internal servers, but again this kind of setup is not true round robin load sharing.

Thanks,
Sandeep T

[msullivan]

The obvious answer is to use round robin DNS, but since your asking the question, there must be some limitation on IP address resources.  Still w/out the use of some sort of reverse proxy technology you would need more address space.  Maybe you could get more IP space, or if you have any old servers laying around, run Linux and use Squid, Apache or any of the other free Linux packages available to do the heavy lifting for you.

If you have the money, F5 simply rocks the house

Cheers,

Mike

[iguarino]

Thank you both for your replies.  I am going to use an additional IP to resolve.