Solved: NAT Desination translate to network range

Ildar07

Hello, everybody.

Is it possible to create NAT rule, which in destination will be a range of IP addresses?

Example: some_network -> some_external_IP translate to some_network -> Range_IP. I guess it is for some server balancing.

How it works on checkpoint - range or network objects in destination NAT? How checkpoint define which address will be used?

I need to know for Checkpoint R77.30 and last versions.

PhoneBoy

Range objects can be used in the NAT rulebase, but primarily in the Source field.
You can use them in the destination field if the NAT is STATIC (not HIDE) and the range is the exactly the same size as the source.

I don't believe you can use the NAT rulebase for load balancing.
However, we have a specific object type for this purpose (Logical Server).
See: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_SecurityManagement_AdminGuid...
See also: https://support.checkpoint.com/results/sk/sk31162

View solution in original post

PhoneBoy

Range objects can be used in the NAT rulebase, but primarily in the Source field.
You can use them in the destination field if the NAT is STATIC (not HIDE) and the range is the exactly the same size as the source.

I don't believe you can use the NAT rulebase for load balancing.
However, we have a specific object type for this purpose (Logical Server).
See: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_SecurityManagement_AdminGuid...
See also: https://support.checkpoint.com/results/sk/sk31162

the_rock

Yes, it is possible, I did that before.

Andy

Are you a member of CheckMates?

NAT Desination translate to network range