Focus

PAN-OS® Networking Administrator’s Guide

Destination NAT Example—One-to-Many Mapping

Table of Contents

Destination NAT Example—One-to-Many Mapping

In this example, one IP address maps to two different internal hosts. The firewall uses the application to identify the internal host to which the firewall forwards the traffic.

All HTTP traffic is sent to host 10.1.1.100 and SSH traffic is sent to server 10.1.1.101. The following address objects are required:

Address object for the one pre-translated IP address of the server

Address object for the real IP address of the SSH server

Address object for the real IP address of the web server

The corresponding address objects are created:

Servers-public: 192.0.2.100

SSH-server: 10.1.1.101

webserver-private: 10.1.1.100

The NAT rules would look like this:

The security rules would look like this:

Destination NAT with Port Translation Example

Source and Destination NAT Example

PAN-OS® Networking Administrator’s Guide

Destination NAT Example—One-to-Many Mapping

Destination NAT Example—One-to-Many Mapping

Recommended For You