can we have dynamic and static nat on vpn gateway together

@56789 ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

From your verbatim,

• You have an Static EgressNAT that translates 10.180.10.1/32 (Original Azure IP) to 2.2.2.2/32
  • Traffic is always initiated from OnPrem to 2.2.2.2/32 (Translated IP)
• You have a new requirement to translate 10.180.10.2/27 to 4.4.4.4/32
  • This time, the Original Azure IP is a range (/27) and Translated IP is a single IP (/32).
  • And hence, you intend on using a Dynamic Rule

From the docs,

• About NAT on Azure VPN Gateway and
• NAT on VPN FAQ
• I don't see any limitation that a single Connection cannot have both Static Rule and Dynamic Rule
• Only thing to note here is that When Dynamic NAT rules are used, traffic is unidirectional which means communication must be initiated from the site that is represented in the Internal Mapping field of the rule.
  • This means, Azure should be the one initiating the connection and not OnPrem
  • See : NAT type: static & dynamic

Hope this helps.

Should you face any problems, please do let me know

Cheers,

Kapil