How do I configure Static Destination NAT on CGNS AWS

[Blason_R]

Hi Team,

Does anyone have a documentation for configuring Static Destination NAT on CGNS AWS? I have front end subnet as 10.10.1.0/24 and backend subnet 10.10.2.0/24. Then I have web subnet as 10.10.6.0/24 and web server is 10.10.6.100. 

Can someone please guide me how do I NAT 10.10.6.100 through Check Point CGNS on AWS?

TIA

Blason R

[Nir_Shamir]

Hi,

you do it the same as any other NAT in Check Point NAT policy.

you said you need Destination NAT ? is it from the Web Server side or from the Internet side ? what is the flow you need ?

[Blason_R]

Oh No - I guess I was not clear enough. I need to host the web server in a VPC which is behind checkpoint and since being a cluster how do I add one more Elastic IP on a cluster and route the traffic to checkpoint so that checkpoint will nat the traffic coming on that EIP and send the traffic out.

Lets say I have EIP assigned to cluster is 20.20.20.20 and now I need to set one more EIP as 50.50.50.50 which will be natted with 10.10.6.100 and natting will be done by Check Point.

[Nir_Shamir]

From what I know , you can't add more EIP on a Cluster Deployment.

you need to use an ELB to publish more Services.