Masking ip... 1to1 nat or better way? hopefully this makes sense

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Post Flair (click to view more posts with a particular flair)

Question

Post Body

I pulled a client out of a colo and he needs access to his gear, something wasn't migrated.

All his gear is set to a public ip space.

If I add his ip block to a interface and set a 1to1 nat to those (old public) settings a new public on the fw... I've done it on pfsense and asa however is there any thing I might be missing or a better way on panos?

Ideally I would not set the 1to1 on the outside just give him vpn and just let him interface that way. Since his equipment is setup as public addresses adding the interface would take priority..

Author

Account Strength

100%

Account Age

9 years

Verified Email

Yes

Verified Flair

Total Karma

32,229

Link Karma

4,659

Comment Karma

26,613

Profile updated: 1 day ago

Posts updated: 1 year ago

ohv_

Subreddit

r/paloaltonetworks

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 3 years ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/paloaltonet...