Description

SRX does not require Source and Destination NAT to handle the traffic. SRX is smart to use the session created to handle the traffic on both ways

Symptoms

  • SRX configured with Source and Destination NAT:
  • Dropping many traffic
  • Traffic which was able to get out to internet is not getting translated.

Solution

You will need to choose NAT based on the requirements of the network.

If traffic is generated outside the network it will be recommended to use destination NAT.

If traffic is generated inside the network it will be recommended to use source NAT.

 

In case Destination NAT is selected, please make sure to configure from-zone to-zone policy is addressing the source address to the IP already translated by NAT; otherwise, traffic will be dropped.

Modification History

2024-04-22 : Article Created

Related Information

Source NAT

Destination NAT

Static NAT