Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ihenock101
Contributor

One to Many NAT

Hi All,

We currently have four servers that acquire a single IP address when they exit the interface. We have a connectivity to our partner and our partner has the same IP subnet, so we must first NAT the server IP addresses to the pool of IP addresses they gave us 

I'm trying to configure a one-to-many (pool) NAT in Checkpoint Firewall R80.40, but I'm having trouble getting it to work for my scenario. Is there any other way for me to achieve this?

Regards,

0 Kudos
2 Replies
G_W_Albrecht
Legend
Legend

Of course - either you or your partner change the IP subnet used by both. Any other solution makes life much harder and should be avoided...

CCSE CCTE CCSM SMB Specialist
0 Kudos
PhoneBoy
Admin
Admin

Admin note: Moving this to a different space.

You can do the following types of NAT:

  • Many to One NAT (i.e. HIDE NAT)
  • One to One NAT (i.e. Static NAT)
  • Many to Fewer NAT (Basically HIDE NAT with a pool of addresses)

Note that Many in this case refers to objects of either type Network or type Address Range.
It is not possible to do a "one to many" NAT.
Without knowing more details about the server IPs on your end (are they in the same subnet, different subnets, or?) and the pool of IPs provided by the remote end (same question), my guess is you'll need multiple HIDE NAT rules to achieve a functional result.
It would help to have some screenshots of what you've attempted and what results were achieved with that configuration.

0 Kudos