topic Re: NAT between SRX and Cisco in Network Security

NAT between SRX and Cisco

Johnson_Mo — Wed, 05 Jun 2024 01:12:20 GMT

Cisco warriors, I need help with this please!

I have SRX doing proxy-arp 192.168.0.0/16 with directly connected to cat 9300 cisco

I want to put another SRX in between as a layer 3 for extra security. is there a way to keep the same IP address for the VLANs on cat 9300?

thanks in advance!

Re: NAT between SRX and Cisco

MHM Cisco World — Wed, 05 Jun 2024 04:29:44 GMT

You can config BVI in new SRX that make SW and old SRX in same subnet and you can put some secuirty in new SRX

MHM

Re: NAT between SRX and Cisco

paul driver — Wed, 05 Jun 2024 04:24:35 GMT

Hello
Why not put the new SRX in transparent mode, thus you keep the addressing as it is but you have the extra security in-between?

Re: NAT between SRX and Cisco

Johnson_Mo — Wed, 05 Jun 2024 11:04:47 GMT

we need to nat Multicast add on the new SRX not on the old one to avoid cpu utilization.

Re: NAT between SRX and Cisco

Johnson_Mo — Wed, 05 Jun 2024 11:23:45 GMT

we need to nat on the new srx so it has to be L3 device. Also, BVI is not supported in SRX only Translational cross connect is supported and required to be in packet mode.

Re: NAT between SRX and Cisco

Johnson_Mo — Wed, 05 Jun 2024 14:06:14 GMT

resolved the issue by using 192.168.0.0/24 between cisco switch and the new SRX

thanks team for responding!