Using public range of IPs

[ce1028]

I have a bit of a silly question to ask but my mind is drawing a blank on this.  If you have a connection from the ISP, say the static IP range is 14.1.1.0/30....their router is 14.1.1.1 and the PA FW will be 14.1.1.2.  Simple enough but what if they also give you a usable range of IPs to use, say 15.1.1.0/27.   To use these IPs , would you need to assign the external interface an additional IP on 15.1.1.0/27 subnet, or could you just create NAT rules that NAT traffic to IPs in that range?

[ce1028]

@raji_toor @SureshReddyM 

Thank you both!

[reaper]

you don't even need to add routes (unless the IP range lives on a different interface than where 0.0.0.0/0 goes out of)

When you create NAT rules that use this new subnet, the firewall will perform proxy arp for the IP addresses (or entire subnet) you configure in the NAT rule. Adding a 'destination interface' in the NAT rule will help the firewall identify which interface these proxy-ARP packets need to go out of