Options

SNAT-ON-VIP

sjc1970sjc1970 Member ✭
in ADC - Application Delivery

Can someone explain to me what SNAT-ON-VIP is and what it does.

I can't find a great deal of information about it.


Many thanks

Answers

  • Options
    mdunnmdunn Member ✭✭
    edited August 2020

    This command, configured within SLB Common or within a Virtual Port, allows the VIP to perform source nat based upon inside / outside interface definitions and a defined NAT pool.

    In the below example, internet clients connect to the "inside" interface, and the "outside" interface connects to the Real Servers

    Clients would receive a source-nat IP of 2.0.0.150

    ### VIP Source NAT Configuration Example (CLI Example)
### The following commands configure the elements that SNAT on VIP require.
### Configure NAT on the inside and outside interfaces:
interface ve 300
ip address 1.0.0.100 255.255.255.0
ip nat inside
interface ve 400
ip address 2.0.0.100 255.255.255.0
ip nat outside
### Configure the access list and NAT pool.
access-list 1 permit any
ip nat pool natpool1 2.0.0.150 2.0.0.150 netmask /24
ip nat inside source list 1 pool natpool1
### Enable SNAT on VIP vPort
slb virtual-server vip1 1.0.0.0.150
  port 443 https
    snat-on-vip

    Does that help clarify?

Sign In or Register to comment.