Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Blason_R
Leader
Leader

How do I configure Static Destination NAT on CGNS AWS

Hi Team,

Does anyone have a documentation for configuring Static Destination NAT on CGNS AWS? I have front end subnet as 10.10.1.0/24 and backend subnet 10.10.2.0/24. Then I have web subnet as 10.10.6.0/24 and web server is 10.10.6.100. 

Can someone please guide me how do I NAT 10.10.6.100 through Check Point CGNS on AWS?

TIA

Blason R

 

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
3 Replies
Nir_Shamir
Employee Employee
Employee

Hi,

you do it the same as any other NAT in Check Point NAT policy.

you said you need Destination NAT ? is it from the Web Server side or from the Internet side ? what is the flow you need ?

0 Kudos
Blason_R
Leader
Leader

Oh No - I guess I was not clear enough. I need to host the web server in a VPC which is behind checkpoint and since being a cluster how do I add one more Elastic IP on a cluster and route the traffic to checkpoint so that checkpoint will nat the traffic coming on that EIP and send the traffic out.

 

Lets say I have EIP assigned to cluster is 20.20.20.20 and now I need to set one more EIP as 50.50.50.50 which will be natted with 10.10.6.100 and natting will be done by Check Point.

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
Nir_Shamir
Employee Employee
Employee

From what I know , you can't add more EIP on a Cluster Deployment.

you need to use an ELB to publish more Services.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.