06-04-2012 05:21 AM
Hello Guys,
Destination NAT translation doesn't work properly with PA-5050 ver 4.1.6
Scenario 1: -
1) Configured 213.42.55.x is mapped with 192.168.1.60 ( www.x.com) with destination nat translation on port www
2) 192.168.1.60 static nat ( bi direct) with 213.42.55.x
Observation : user from public host able to access the www.x.com
Scenario 2:
1) Configured 213.42.49.x is mapped with 192.168.1.75 ( www.y.com) with destination nat translation on port www
Observation : user from public host NOT able to access the www.y.com
In scenario 1 access from public host to www.x.com worked coz static nat ( bi-direc) is configured although its not required along with destination based nat translation ....but
in Scenario 2 : access from public to www.y.com didn't work as only destination based nat translation was required
Note : we observed from traffic logs that traffic is hitting in both scnearios on public ips .....
only difference is public host not able to access www.y.com .
Pleae let me know if it is realted to a any bug or config issue.
~ Akber Mirza.
