02-24-2012 06:43 AM
02-27-2012 05:24 PM
I don't fully follow your description of the setup. I'm not sure how the redundant pair is working with the addresses.
But MIP is the tool you are looking for. This is bi-directional translation. And it does use CIDR to bulk translate ranges. Be sure to use the first active address and not the subnet address when you create them.
The MIP is created on the interface where the traffic is translated. So in this case I guess your redundant interface would be the one.
The policy then uses the MIP as the source or destination as you desire and sets up the services and applications assigned. You will not be using any policy translation features or DIP at all.
Senior IP Engineer - DQE Communications Pittsburgh, PA
JNCIA-ER JNCIA-EX JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCDA JNCDS-DC JNCDS-SEC
ACE PanOS 6