How to use ip public by from organization

[hoangtung225]

Hi every one,

I'm very nice to tall to you. I dont know how to use block IP that I bought from the Organization. When I bough block of IP, I got an AS number. I hire transit ip service from ISP. I config BGP to neighbor with ISP, after that, I dont know how to do next to use ip for NAT or use for my VM.

Could someone can help me. Thanks a lot

[PavelK]

Thank you for the post @hoangtung225

If you have already advertised your address block by BGP to ISP and receive a default route/full BGP feed from ISP, then next thing would be NAT configuration. If you are planning to do NAT on the same Firewall, then there are many resources and KBs from Palo Alto for NAT configuration. Here is one KB to get started: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC

Depending on the size of your organization, for source NAT, if number of clients behind NAT is high, then I would recommend to create an address pool with several IPs from your IP block and use it for address translation with translation type: Dynamic IP and Port. If number of clients behind NAT is small you can use a single IP address combined with with translation type: Dynamic IP and Port. Since you have your own IP block, you can avoid doing NAT to interface that is using ISP assigned IP addresses.

Kind Regards

Pavel