Focus

PAN-OS® Networking Administrator’s Guide

Virtual Wire Static NAT Example

Table of Contents

Virtual Wire Static NAT Example

In this example, security policies are configured from the virtual wire zone named Trust to the virtual wire zone named Untrust. Host 192.0.2.100 is statically translated to address 198.51.100.100. With the

Bi-directional

option enabled, the firewall generates a NAT policy from the Untrust zone to the Trust zone. Clients on the Untrust zone access the server using the IP address 198.51.100.100, which the firewall translates to 198.0.2.100. Any connections initiated by the server at 192.0.2.100 are translated to source IP address 198.51.100.100.

Route on R2:

Destination	Next Hop
198.51.100.100/32	198.51.100.1

Virtual Wire Source NAT Example

Virtual Wire Destination NAT Example

PAN-OS® Networking Administrator’s Guide

Virtual Wire Static NAT Example

Virtual Wire Static NAT Example

Recommended For You