How to apply NAT to a Network Group

[TamSOL]

Hello Team,

We are planning to test a NAT configuration on R81.20.

If I set a Network Group as the source, the following error is displayed.

"The Network group is only valid if the value of the matching translated colum is 'Original' or if the translated source is 'HOST' /Address Range and the Method is Hide."

I want to configure NAT for a Network Group. In this case, do I need to set up Hide NAT for each individual object separately?

Thank you for all the advice.

[emmap]

The network group is the Original Source? What did you set the Translated Source to? 

[TamSOL]

Dear emmap

Thank you for the reply.

Yes,  I want to set the Network Group as the Original Source and translate it to the IP address of the Out-side interface as the post-NAT IP address.

[emmap]

I believe that should work as long as you set the translated side to Hide NAT.

[TamSOL]

I mistakenly thought that I needed to add Hide NAT to the Network Group in the Original Source.

It turns out that I need to configure NAT for the object in the Translated Source instead.

Thanks!

[AkosBakos]

Hi @TamSOL 

What I told about NAT that is an easy way. If you want to do manual NAT instead, feel free, and do it, the two solution is fully equivalent.

Akos

[AkosBakos · Accepted solution]

Hi @TamSOL 

The easiest way to set up a NAT on a specific network, if you set it on the object itself:

Here:

I hope it helps 🙂

Á

[TamSOL]

Thank you for the reply.

Does the response differ from the behavior when configuring NAT for the Translated Source?

[AkosBakos]

Hi @TamSOL 

From the NAT point of view, this will act as a manual hide NAT. 

As you configure on the network object, you will see it in the NAT table, but you can edit the rule by editing the host object.

Akos