IP Nat Pool

[tester125]

Hi everyone,

I have a situation with one of my vendor. I'm running Checkpoint NG.
I have to setup a vpn tunnel, and have to Nat my client address on my end. I'm in a 10.network and have to nat to 192.168.90.x. I have about 90 clients that needs to connect to my vendors network. What's the best way of doing this, does Checkpoint support IP Nat pool? for such a situation.
remember I have to Nat a subnet that consists of:
10.90.0.0 to 192.168.90.x
10.91.0.0 to 192.168.90.x
10.91.0.0 to 192.168.90.x

Any inputs will be great.

 

[rn4it]

Just create the 3 networks, place them in a group. and Create the NAT rule to the vendors network and back. You'll probably need a 2way rule.

 

[tester125]

Hi rn4it I do appreciate the input.

I'm not sure if am following you.

I understand to create the group for the 3 network, but how to I create the Ip Nat Pool.

for example:

I want whatever comes out of
10.90.0.0 get translated at the firewall and gets a pool address in 192.168.90.0-255 range. Another workstation that connects from 10.91.0.0 gets a different address in the 192.168.90.0-255 range.

Any further assistance will be great.

 

[rn4it]

I don't think you can do that, but not 100% sure.
goodluck

 

[tester125]

Hey rn4it,

Thanks anyway for your input. Yeah I can't come across any articles on it either.

Do you know of another way that I can do this?

Thanks again.

 

[rn4it]

Why can't you just NAT your side under a single NAT? From your FW you'd be able to see who is connecting through. I guess what I'm understanding is the reason for each IP NATing to it's own IP. I surely wouldn't want to do a bunch of individual NAT rules for each PC.