topic One to Many NAT in Firewall and Security Management

One to Many NAT

ihenock101 — Wed, 25 Jan 2023 07:02:50 GMT

Hi All,

We currently have four servers that acquire a single IP address when they exit the interface. We have a connectivity to our partner and our partner has the same IP subnet, so we must first NAT the server IP addresses to the pool of IP addresses they gave us

I'm trying to configure a one-to-many (pool) NAT in Checkpoint Firewall R80.40, but I'm having trouble getting it to work for my scenario. Is there any other way for me to achieve this?

Regards,

Re: One to Many NAT

G_W_Albrecht — Wed, 25 Jan 2023 07:09:30 GMT

Of course - either you or your partner change the IP subnet used by both. Any other solution makes life much harder and should be avoided...

Re: One to Many NAT

PhoneBoy — Wed, 25 Jan 2023 17:35:48 GMT

Admin note: Moving this to a different space.

You can do the following types of NAT:

Many to One NAT (i.e. HIDE NAT)
One to One NAT (i.e. Static NAT)
Many to Fewer NAT (Basically HIDE NAT with a pool of addresses)

Note that Many in this case refers to objects of either type Network or type Address Range.
It is not possible to do a "one to many" NAT.
Without knowing more details about the server IPs on your end (are they in the same subnet, different subnets, or?) and the pool of IPs provided by the remote end (same question), my guess is you'll need multiple HIDE NAT rules to achieve a functional result.
It would help to have some screenshots of what you've attempted and what results were achieved with that configuration.