NAT between SRX and Cisco

[Johnson_Mo]

Cisco warriors, I need help with this please!

I have SRX doing proxy-arp 192.168.0.0/16 with directly connected to cat 9300 cisco 

I want to put another SRX in between as a layer 3 for extra security. is there a way to keep the same IP address for the VLANs on cat 9300?

thanks in advance! 

[MHM Cisco World]

You can config BVI in new SRX that make SW and old SRX in same subnet and you can put some secuirty in new SRX 

MHM

[Johnson_Mo]

we need to nat on the new srx so it has to be L3 device. Also, BVI is not supported in SRX only Translational cross connect is supported and required to be in packet mode. 

[paul driver]

Hello
Why not put the new SRX in transparent mode, thus you keep the addressing as it is but you have the extra security in-between?

[Johnson_Mo]

we need to nat Multicast add on the new SRX not on the old one to avoid cpu utilization. 

[Johnson_Mo · Accepted solution]

resolved the issue by using 192.168.0.0/24 between cisco switch and the new SRX 

thanks team for responding!