Dynamic NAT

[rkothapalli321]

Hi,

Good Morning Everyone....!

Could you please explain how to configure Dynamic NAT on a Check Point Firewall?

Additionally, I do not currently have access to the Check Point management portal. Could you share the step-by-step procedure for configuring Dynamic NAT so I can understand the process?

Thanks & Regards,

Rajashekar.

[PhoneBoy]

Supported from R81.
It's configured the same as any other NAT rule with an FQDN Domain Object as the Translated Destination.
See: https://support.checkpoint.com/results/sk/sk167194 
Such a rule would look something like this, which includes a HIDE NAT for the source traffic:

[rkothapalli321]

Hi Sir,

Thanks for your support.

I have three public IP addresses and need to configure NAT rules so that all outgoing source traffic is translated across these IPs on a "First Come, First Served" (FCFS) basis.

I would like to implement this configuration and need your guidance. Could you please assist me with the setup?

Regards,

Rajashekar.

[rkothapalli321]

Hi Sir,

I am waiting for your response....!

Regards,

Rajashekar

[Martijn]

Hi,

What version are you running? Cluster or single gateway?

Create an IP-Range object which represents the three IP-addresses
Create a NAT rule with: source your internal network and translated source the IP-Range object.

Make sure Proxy ARP is configured correctly.

Martijn

[rkothapalli321]

Hi Martijn,

Thanks for your support...!
We are running R81.10  & Cluster Mode: Virtual System Load Sharing (Primary Up)

Regards,

Rajashekar.

[PhoneBoy]

I answered the question as Palo Alto Networks refers to "Dynamic NAT."
What you're describing is what we call "Many to Fewer NAT" and it's described here: https://support.checkpoint.com/results/sk/sk142833
If the IPs are not in a contiguous range, then this won't work and you'll have to find a manual way to split the usage between the three IPs.