Routing IP address range through firewall

[migration]

As somewhat of a newby to PAN, I need to ask how do I go about passing an internal public IP range outbound through the firewall and NOT natting it.  This certain range of addresses will only connect to one other public IP address (different, external network) but the other address needs to be able to see these internal IP 's for what they are and not be natted.

Thanks!  Mike

[kbrazil · Accepted solution]

Hi Mike,

You can exempt certain IP's or subnets from NAT by keeping the Source and Destination Translation fields as "none"

Cheers,

Kelly

[migration]

Yeah, this sounds like what I need to do.  If I set the source address to that of my internal range and the destination address to that of my target server, then the "no-natting' should only occur between those two sets of addresses, right?  Any extra Security policy rules needed( (other than what I already have in place)?

[kbrazil]

You got it.  You shouldn't need any other policy entries beyond what you would normally have in your Security Policy to allow the two segments to communicate.

Cheers,

Kelly

[migration]

Should that new NO NAT rule be placed above the normal outbound PAT rule everyone else on the network is using?