One to One NAT

[Pradeep21]

We have 100 IP address to NAT with 100 IP. It should be fixed IP

example 172.10.10.1 nat to 192.168.1.1

172.10.10.2 nat to 192.168.1.2

172.10.10.3 nat to 192.168.1.3

|

|

172.10.10.100 nat to 192.168.1.100

we have option as SNAT i.e. one to one and overload.

Please suggest how can we achieve?

[abarushka]

Hello,

You may consider to configure 100 one-to-one IP pools and configure firewall policy per IP pool. However there might be more elegant solution. 

[pavankr5]

Hello @Pradeep21 ,

You can create a Virtual IP pool to define the range of public IP addresses that will be used for NAT. Go to the VIP section in the FortiGate configuration and create a pool with the 100 public IP addresses (e.g., 172.10.10.1 - 172.10.10.100). Once the VIP pool is created, you can configure Static NAT (one-to-one NAT) for each private IP address. For each private IP (e.g., 192.168.1.1 - 192.168.1.100), create a VIP mapping in the configuration, specifying the corresponding public IP from the VIP pool.
Ensure that the NAT rules are correctly configured to use the Static NAT mapping. Update the source or destination address in the firewall policies to use the public IP addresses from the VIP pool, depending on whether you are configuring inbound or outbound NAT.

Test the NAT by accessing the public IP addresses from external networks and verify that the traffic is correctly translated to the corresponding private IP addresses.

update us if this works for your requirement.

Thanks,

Pavan

[mgoswami]

Hi,

You may refer to this link for the same:

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/898655/static-snat

BR,

Manosh