product
- About Cato Networks
- About Cato SASE Cloud
- Unification of shadow IT countermeasures by Cato CASB,
- Information leakage countermeasures with Cato Smart DLP
- Safe website browsing with Cato RBI
- CATO socket Easily connect existing LAN environment to SASE. Migration to SASE made easy
- Cato SASE XDR
- Cato DEM(Digital Experience Monitoring)
Application for evaluation machine

Cato Networks
Cato Networks
IP conflict prevention and network integration during Cato migration
As companies undergo M&A or group company integration, they often end up with multiple WAN environments. As a result, when considering migration to Cato, they face the problem of "IP address conflicts." In particular, if different locations or group companies use the same IP range, communication may be restricted and network management may become complicated.
This article provides detailed information on how to use Cato to consolidate networks with competing IP ranges.
What to do if there is an IP conflict?
NAT or adjust IP addressing
When companies with multiple WAN environments migrate to Cato, they often encounter IP address conflict issues. In such cases, there are two main ways to solve the problem: using NAT or streamlining IP addressing.
Each method has its pros and cons. If you are looking for a short-term solution, it is better to use NAT, but if you are looking for long-term stable operation, it is better to organize your IP addressing.
[In the case of NAT] There are two patterns depending on the location of NAT
1. Use Cato's SRT (Static Range Translation) feature
There is a way to resolve IP conflicts by utilizing Cato's Static Range Translation (SRT) function. By using SRT, you can maintain the duplicated IP addresses between bases and apply different IPs when communicating between bases. This allows you to avoid IP conflicts.

merit
- Easily avoid IP conflicts.
- It can be set up and managed on the Cato administration screen, so it requires little effort.
Demerit
- Since it cannot be used in conjunction with BGP, limitations arise when route control is required.
- There are restrictions on the use of WAN resiliency features (such as WAN Recovery) and certain protocols (DNS, FTP, SIP).
2. Implement NAT on L3 switches within the base
Another method is to implement NAT on an L3 switch at the site, convert the internal IP address, and register the converted network address in Cato. This method does not use Cato's SRT function, so it can avoid the disadvantages of SRT.

merit
- It avoids SRT restrictions (BGP restrictions and disabling WAN resiliency).
- Flexible NAT rules can be applied, allowing configuration to suit the requirements of each branch office.
Demerit
- Additional configuration of L3 equipment is required, making operation somewhat more complicated.
- Performance checks are required as the load on L3 devices may increase.
[IP addressing organization] This is recommended
Utilizing NAT is an effective short-term solution, but if you consider long-term operation, organizing IP addressing is the recommended method.
By reviewing the IP address system and fundamentally eliminating conflicts, it will be possible to easily expand the network in the future and prevent management from becoming complicated.
merit
- Simplified networking and easier troubleshooting.
- It ensures scalability and can flexibly accommodate future changes.
Demerit
- Changes to the existing network will be required, resulting in migration costs.
- The entire network needs to be reviewed, and planned reorganization is required.
![[IP addressing organization] This is recommended](/business/security/cato/image/cato_ip_conflictand_and_network_dr03.png)
Summary
The main methods to resolve IP conflicts are to use NAT or to streamline IP addressing. In the short term, using NAT provides immediate relief, but in the long term, streamlining IP addressing is recommended.
NAT options include SRT at Cato PoP and in-site NAT, but each has its own advantages and disadvantages, so it is important to choose the method that best suits your operational environment and requirements.
Ultimately, organizing your IP addresses will provide the most stable operation and will also contribute to future scalability and improved security, so we recommend that you choose this method as a priority if possible.
Inquiry/Document request
Macnica Cato Networks
- TEL:045-476-2010
- E-mail:cato-sales@macnica.co.jp
Weekdays: 9:00-17:00