Hi, I have an isolated network (192.168.3.x/24) being served by VirtualRouter, where 10.84.59.131 is SourceNAT address and eth0 is VN interface of VirtualRouter & eth2 is the public interface of VirtualRouter.
When I look at the nat table entries on the VirtualRouter, it shows following : root@r-6-VM:~# iptables -L -t nat -n -v .. .. Chain POSTROUTING (policy ACCEPT 330 packets, 22113 bytes) pkts bytes target prot opt in out source destination 0 0 SNAT all -- * eth0 0.0.0.0/0 0.0.0.0/0 to:10.84.59.131 --> Why the "out" interface for the SNAT entry is VN interface (eth0) instead of Public interface (eth2) ? I'm using "Cloudstack Release 4.3.0 (64-bit) Thu Apr 10 20:27:11 UTC 2014" cloudstack-release template. Thanks, Sachin --- root@r-6-VM:~# ifconfig eth0 Link encap:Ethernet HWaddr 02:13:87:88:e6:dd inet addr:192.168.3.226 Bcast:192.168.3.255 Mask:255.255.255.0 inet6 addr: fe80::13:87ff:fe88:e6dd/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:350 errors:0 dropped:0 overruns:0 frame:0 TX packets:7 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:29400 (28.7 KiB) TX bytes:602 (602.0 B) Interrupt:25 eth1 Link encap:Ethernet HWaddr 0e:00:a9:fe:02:6b inet addr:169.254.2.107 Bcast:169.254.255.255 Mask:255.255.0.0 inet6 addr: fe80::c00:a9ff:fefe:26b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:3293 errors:0 dropped:0 overruns:0 frame:0 TX packets:2934 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:444768 (434.3 KiB) TX bytes:539100 (526.4 KiB) Interrupt:26 eth2 Link encap:Ethernet HWaddr 06:d5:1c:00:00:0b inet addr:10.84.59.131 Bcast:10.84.59.255 Mask:255.255.255.0 inet6 addr: fe80::4d5:1cff:fe00:b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:133 errors:0 dropped:0 overruns:0 frame:0 TX packets:1451 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:4636 (4.5 KiB) TX bytes:113282 (110.6 KiB) Interrupt:27