topic Re: NAT Question in General Topics

NAT Question

Gongya_Yu — Mon, 25 Sep 2023 16:03:20 GMT

My Checkpoint Gateway has two internal interfaces. What I need is that all the traffic coming from interface 1 is not natted, but all the traffic coming from interface 2 will be natted.

Can I do this ?

thanks !!

Re: NAT Question

PhoneBoy — Mon, 25 Sep 2023 17:50:03 GMT

Is it possible? Yes.
You will have to create the relevant manual NAT rules either in terms of IP addresses or (R81+) zones.

Re: NAT Question

the_rock — Tue, 26 Sep 2023 00:55:47 GMT

I think your best bet is something like this..."tie" interface needed for nat to say whatever zone appropriate and then use that zone in relevant nat rule, pretty much what @PhoneBoy said. Verify policy, install, test. If it works, great, if not, go back and check the logs to see why it fails.

Andy

Re: NAT Question

Gongya_Yu — Fri, 29 Sep 2023 02:43:27 GMT

Any ideas ? not tolerate the version, I guess.

thanks !!

Re: NAT Question

Vincent_Bacher — Fri, 29 Sep 2023 06:39:51 GMT

How does NAT rule 5 look like? Screenshot?

Re: NAT Question

the_rock — Fri, 29 Sep 2023 10:11:52 GMT

It has zero to do with the version, but everything to do with source translation object, thats exactly what it says in the error you get. Can you please send a screenshot of the ads-nat-pool you are using?

Andy

Re: NAT Question

Chris_Atkinson — Fri, 29 Sep 2023 14:57:01 GMT

Zones are supported in the NAT policy only from R81 and higher (sk128572).

Re: NAT Question

Gongya_Yu — Fri, 29 Sep 2023 19:45:05 GMT

After I used 81.20, the policy passed. I am to test now.

thanks to all!

Re: NAT Question

the_rock — Fri, 29 Sep 2023 19:49:59 GMT

Good job!