Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

L2 Linker

The overlap that you have in the network isn't something that can be fixed by using a second virtual router. The first routing lookup decision would work to force the address to the correct zone. Once NAT is matched the second routing lookup will take place and then send the traffic to internal network.


If the subnet is not used in your network, then you can just a NAT on the firewall and a route to send it to the next hop.


If you are using in your network, then this could be resolved by using a second virtual system, but the PA-850 does not support multiple virtual systems. A minimum of PA-3200 is needed to get the multi-vsys feature.


If you can perform a source NAT on the traffic prior to it being received on the PA-850 (Linux VM with DNAT), then you would then use a PBF rule for the source of the Linux VM to the destination of the server, to use the next hop of The Linux VM just needs to be able to route that traffic to the PA-850 for that address/subnet.

Who rated this post