topic Hair Pin NAT in General Topics

Hair Pin NAT

Sanjay_S — Wed, 29 Apr 2020 13:15:19 GMT

Hi All,

We need to get the HairPin NAT working in Checkpoint firewall. Scenario is as below.

Example one below:

Src: 10.10.10.20(Static NAT: Public IP1 = consider x.x.x.x)

Dst: 10.10.10.40(Static NAT: Public IP1 = consider y.y.y.y)

Customer should access y.y.y.y from the source 10.10.10.20 but this is not working, i can see the traffic leaving the firewall but not seeing the return traffic.

So is there any way that the Src 10.10.10.20 can access the public IP y.y.y.y.

Src:10.10.10.20 > NAT(x.x.x.x) > Leave the FW > Dst: y.y.y.y > Back to FW > 10.10.10.40

Any advice on this would be helpful.

Regards

Sanjay S

Re: Hair Pin NAT

PhoneBoy — Thu, 30 Apr 2020 22:11:51 GMT

I answered the same basic question here: https://community.checkpoint.com/t5/Access-Control-Products/Traffic-flow-in-between-C-to-S-via-Firewall-How/m-p/8465

Re: Hair Pin NAT

Yatiraj_Panchal — Fri, 01 May 2020 08:18:14 GMT

Please use below link to get solution for this.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110019