Dynamic Nedved, for example.
So basically in the previously what we have done in the previous labs, what we have done, we using
we done a bad actually, if you look up a diagram actually here, our diagram shows that we are sitting
in our private land and our private network is actually TANDOOR one DOT 11 network.
OK, this was this network, the traffic is going through the virtual wire hitting to the left interface
and then it reaching to the issue is going outside.
So this interface is connected to the Internet, 200 to 250 for to 210.
That's the IP that we have assigned.
And we have no previously what we are using.
We were doing the pat in the back.
What happened?
You have one IP address, public IP address, but you have multiple holes, maybe 100, 100, 2000 IP
addresses inside and they are taking the traffic from private land to the public network.
So the idea happened in the past, actually, they use the IP address configured on the land interface.
OK, and then they go outside, actually.
So this is the part the part will work in this way, but no, we are not going to do another example
where we have a pool IP address rather than the using the interface IP.
We need to use the pool IP address.
So pool has been given here to under one or two to four to 11 to 20.
That's the range of IP.
So what happens now?
Later on we can disable this rule and make sure that the traffic this time going through from the private
land, 10.1 11 to the outside network using this pool, actually.
This is I can show right now if I go to my panorama, if I go to my panorama, actually.
Here and I try to look for the monitor and look for the logs here.
So if I go to the Internet site misconfiguration, I'm going to the Internet.
OK, so you can see now what is happening, not applied.
Now, what is happening?
You check the logs.
So what happened to this one?
This is the source IP and is going to you can see it is using a private IP public IP address configured
on the on the firewall interface.
OK, this is the one IP address which is configured and it is used to communicate to the outside world,
the outside world has no idea about, 10.1 wonders.
Then they know two hundred wandered off before that to 210.
But this is called back.
This is one IP.
So later on, when you will be configuring your IP, what is going to happen that you will be able to.
Communicate through this one public appearance, my land and your land will be one.
Now, in some cases, we only use this when we do not have the public IP addresses available in the
in the bulk.
We always use a net IP like the range of IP.
So in order to do this, what we need to do is reduce time.
What I going to do, I'm going to create a new rule at my policy is already there in the not rule,
but this should be in the actual device group.
That's the land rule is already existing, and you can see it is using the IP address of one reader
to 54.
So what we are saying, if the traffic come from here and they want to live outside, they will be use
the IP address of this interface, configure interface dynamic IP input.
And this is the interface address is the interface and is the type actually, similarly, I need to
create now what I need to do.
First of all, I need to create an object and that object will be created.
And my not all will be 201 dark.
254 or 210.
Two to 20, I think this is the one.
Eleven to twenty eight to 11.
220 here, I can use the range.
And my range will be.
OK.
OK, that's what we have to figure now.
In the policy, what we need to do in the policy.
Let's eliminate all we need to go the actual device group, then go to the natural, select the this
and you can take a clone.
OK, put this rule on the top.
Because this time we don't want to use the bat, but we use the not actually.
Everything the same original package is the same, but this time we are using the dynamic IP and the
dynamic IP, we are using the.
Rich.
OK.
That's, I think, the same.
This is what I'm putting on the top, but you can see the previously we were using the recipe, this
time we're using the public IP address a range.
Let me push to that panorama.
But we are pushing it to turn this one, this is over.
Meanwhile, all right, this is fight while the rest of the leg to cap actually let me push it with
a fireball as well.
OK.
So this is you can see we applied now, so let's.
So, again, it's showing you that if we send a graphic, new graphic right now.
From here for the Internet site, traffic, HSBC, Google.
All this is working.
OK, but when we checked in at.
So let it go and we check the Natnael.
It's using the back, so difference between Matt and Pat Pat is just one public appearance, one public
appearance, which means one configured.
I put us on the on the net, on the on the interface issues that I.
But in the case of Pat, you have a one you have a multiple public appearances, you have a range of
IP addresses, those will be used.
Now, you can see I have four kids, I guess apply this rule from the Panorama.
Let me try to send more traffic from here.
It just VXI Dropbox and any any kind of graphic.
BBC.
So now let's go to the monitor now I you see the traffic is still flowing, but this time that is applied.
Let's see what what appears we are taking.
So to then is still in use to just one second.
You see 212.
Because it's a pool of IP, it might use to 11 to 12, sometimes to 10.
You see to and now you see it start flowing the traffic and using used to travel right out i.p.
So if I go, Manuel.
Thirty seconds.
So you see this one is now.
You see, Tutuola is now used.
OK, so this is a not so you have.
How many hits you have?
Three zero seven hits, OK?
Now, this rule will never hit because now we have the.
So this is how I have configured my NAT rule and also I can think of the pattern as well.
I just configure a pool.
So just to recap, I have configured a pool.
First of all, I can get an object if the object is already configured by me.
You don't need to worry about that.
You can you can use the same, you can use a different name.
But for the same IP, you will be using the same IP range all the time for using an address.
OK, if I already configured, then don't worry, you can use them into the policy.
And in the policy, you what we have done previously, we get bad, we have taken the clone.
The only difference, what we have previously, we have dynamic IP and both this time we have dynamic
you see dynamic IP.
OK.
And this is what we have applied on the panorama and the fight and the results and that when we checked
the monitor, we can see this taking the IP address from the pool itself, it can be to 11 to 12 to
13, whatever it is available.
OK, is that clear?
Thank you.