SNAT-ON-VIP

sjc1970

Can someone explain to me what SNAT-ON-VIP is and what it does.

I can't find a great deal of information about it.

Many thanks

mdunn

This command, configured within SLB Common or within a Virtual Port, allows the VIP to perform source nat based upon inside / outside interface definitions and a defined NAT pool.

In the below example, internet clients connect to the "inside" interface, and the "outside" interface connects to the Real Servers

Clients would receive a source-nat IP of 2.0.0.150

### VIP Source NAT Configuration Example (CLI Example)
### The following commands configure the elements that SNAT on VIP require.
### Configure NAT on the inside and outside interfaces:
interface ve 300
ip address 1.0.0.100 255.255.255.0
ip nat inside
interface ve 400
ip address 2.0.0.100 255.255.255.0
ip nat outside
### Configure the access list and NAT pool.
access-list 1 permit any
ip nat pool natpool1 2.0.0.150 2.0.0.150 netmask /24
ip nat inside source list 1 pool natpool1
### Enable SNAT on VIP vPort
slb virtual-server vip1 1.0.0.0.150
  port 443 https
    snat-on-vip

Does that help clarify?