Having an issue with NAT extension cannot be enabled for the device having support

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Having an issue with NAT extension cannot be enabled for the device having support

L0 Member

Hello Experts, 

 

I have had an issue with ION 2K device and unable to enable the NAT rule in the ION 2K device, Receiving the following error, 

Can you please help me to fix this issue ? 





Failed to save "PhoNATt". - NAT extension cannot be enabled for the device having support for nat policy.

4 accepted solutions

Accepted Solutions

L2 Linker

Hi, 

 

This NAT function will work prior to ION software version 5.2.x, if the current device software version is 5.2.1 or above you might face this issue. 


Link to release notes changes in behavior. 

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/5-2/prisma-sd-wan-ion-release-notes/prisma-sd...

Do let us know if you need any further information. 

 

View solution in original post

L2 Linker

Hi @rewarsuresh 

The below link will help with configuring the NAT policy for devices with software version 5.2.X and above. If you still need any further Palo alto is always happy to help you 🙂

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-nat-policie...

-kn

View solution in original post

L0 Member

@kn  Is there any option now to migrate all the existing NAT policies to NATstack policies? or do I need to configure manually all the policies? Your help will be appreciated 

View solution in original post

@rewarsuresh  existing policies need to be migrated manually, and as far as I know, we don't have any tool to address it with automation. 

View solution in original post

7 REPLIES 7

L0 Member

I am attaching the picture of error 

 

L2 Linker

Hi, 

 

This NAT function will work prior to ION software version 5.2.x, if the current device software version is 5.2.1 or above you might face this issue. 


Link to release notes changes in behavior. 

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/5-2/prisma-sd-wan-ion-release-notes/prisma-sd...

Do let us know if you need any further information. 

 

L0 Member

@kn  what is the solution now ? in order to resolve the issue ? thanks in advance 

 

L2 Linker

Hi @rewarsuresh 

The below link will help with configuring the NAT policy for devices with software version 5.2.X and above. If you still need any further Palo alto is always happy to help you 🙂

https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-nat-policie...

-kn

L0 Member

@kn  Is there any option now to migrate all the existing NAT policies to NATstack policies? or do I need to configure manually all the policies? Your help will be appreciated 

@rewarsuresh  existing policies need to be migrated manually, and as far as I know, we don't have any tool to address it with automation. 

L0 Member

@kn Thank you for your help. appreciated. 

  • 4 accepted solutions
  • 6523 Views
  • 7 replies
  • 0 Likes
  • 34 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!