Having an issue with NAT extension cannot be enabled for the device having support

[rewarsuresh]

Hello Experts, 

I have had an issue with ION 2K device and unable to enable the NAT rule in the ION 2K device, Receiving the following error, 

Can you please help me to fix this issue ? 

Failed to save "PhoNATt". - NAT extension cannot be enabled for the device having support for nat policy.

[rewarsuresh]

I am attaching the picture of error 

[kn · Accepted solution]

Hi, 

This NAT function will work prior to ION software version 5.2.x, if the current device software version is 5.2.1 or above you might face this issue. 

Link to release notes changes in behavior. 

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/5-2/prisma-sd-wan-ion-release-notes/prisma-sd...

Do let us know if you need any further information. 

[rewarsuresh]

@kn  what is the solution now ? in order to resolve the issue ? thanks in advance 

[kn · Accepted solution]

Hi @rewarsuresh 

The below link will help with configuring the NAT policy for devices with software version 5.2.X and above. If you still need any further Palo alto is always happy to help you 🙂

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-nat-policie...

-kn

[rewarsuresh · Accepted solution]

@kn  Is there any option now to migrate all the existing NAT policies to NATstack policies? or do I need to configure manually all the policies? Your help will be appreciated 

[kn · Accepted solution]

@rewarsuresh  existing policies need to be migrated manually, and as far as I know, we don't have any tool to address it with automation. 

[rewarsuresh]

@kn Thank you for your help. appreciated.