1. Home
    2. PAN-OS
    3. PAN-OS Web Interface Reference
    4. Policies
    5. Policies > NAT
    6. NAT Original Packet Tab

    NAT Original Packet Tab

    • Policies > NAT > Original Packet
    Select the
    Original Packet
     tab to define the source and destination zones of packets that the firewall will translate and, optionally, specify the destination interface and type of service. You can configure multiple source and destination zones of the same type and you can apply the rule to specific networks or specific IP addresses.
    NAT Rule - Original Packet Settings
    Description
    Source Zone / Destination Zone
    Select one or more source and destination zones for the original (non-NAT) packet (default is
    Any
    ). Zones must be of the same type (Layer 2, Layer 3, or virtual wire). To define new zones, refer to Network > Zones.
    You can specify multiple zones to simplify management. For example, you can configure settings so that multiple internal NAT addresses are directed to the same external IP address.
    Destination Interface
    Specify the destination interface of packets the firewall translates. You can use the destination interface to translate IP addresses differently in the case where the network is connected to two ISPs with different IP address pools.
    Service
    Specify the service for which the firewall translates the source or destination address. To define a new service group, select Objects > Service Groups.
    Source Address / Destination Address
    Specify a combination of source and destination addresses for the firewall to translate.
    For NPTv6, the prefixes configured for
    Source Address
     and
    Destination Address
     must be in the format xxxx:xxxx::/yy. The address cannot have an interface identifier (host) portion defined. The range of supported prefix lengths is /32 to /64.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo