# Real Server NAT (South-North) when access Internet

**URL:** <https://community.a10networks.com/t/real-server-nat-south-north-when-access-internet/385>\
**Category:** System\
**Created:** [March 17, 2016, 11:53am UTC](https://community.a10networks.com/t/real-server-nat-south-north-when-access-internet/385 "2016-03-17T11:53:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rwilliams](https://avatars.discourse-cdn.com/v4/letter/r/74df32/32.png) [@rwilliams](https://community.a10networks.com/u/rwilliams)\
**Post date:** [March 17, 2016, 11:53am UTC](https://community.a10networks.com/t/real-server-nat-south-north-when-access-internet/385/1 "2016-03-17T11:53:40Z")

</div>

Hi All,

I need help on how to achieve source NAT for traffic originating from a real server and heading North to the Internet.

I have set up our 3030s with basic Load Balancing, and using Source NAT Pool attached to various virtual services, which all works fine as expected to NAT incoming client traffic to the backend Real Servers.

However, the Real Servers need direct access to the Internet for updates etc, so I need to NAT any traffic originating from the Real Servers heading out (North) via the Load Balancer. Idealy I would like it to be NATed behind the VLAN interface on the 3030s that is on the Outside.

So as follows:

Internet  
|  
Edge Firewall  
|  
|  
3030s Outside interface Vlan 20 (172.16.0.1/24)  
|  
3030s Inside interface Vlan 10 (10.10.0.1/24)  
|  
|

```auto
Real Server (10.10.0.100/24)

So when the real server accesses the internet, the edge firewall sees the IP source address as 172.16.0.1.

```

How do I achieve this?

Thanks

Ryan

---

<div class="post-metadata">

**Author:** ![rwilliams](https://avatars.discourse-cdn.com/v4/letter/r/74df32/32.png) [@rwilliams](https://community.a10networks.com/u/rwilliams)\
**Post date:** [March 17, 2016, 2:14pm UTC](https://community.a10networks.com/t/real-server-nat-south-north-when-access-internet/385/2 "2016-03-17T14:14:42Z")

</div>

Hi All,

Ok I have figured out how to achieve this using a NAT pool, but I would like to use the same IP address for the NAT source as the 3030s Interface.

Is this possible.

Rgds

Ryan

---

<div class="post-metadata">

**Author:** ![dshin](https://avatars.discourse-cdn.com/v4/letter/d/f05b48/32.png) [@dshin](https://community.a10networks.com/u/dshin)\
**Post date:** [April 4, 2016, 4:53pm UTC](https://community.a10networks.com/t/real-server-nat-south-north-when-access-internet/385/3 "2016-04-04T16:53:01Z")

</div>

I do not think this feature is supported if you use the interface IP as a NAT pool address. However, one option is to use “Source NAT traffic against VIP”.

Genard