Hi Alexc,

In your source NAT rules, you should set the "source address" *instead of* the 
"inside-address". For example, for rule 10, you should do "set service nat rule 
10 source address 10.10.1.1" instead of setting the "inside-address". Let me 
know if this does what you want. Thanks!

An-Cheng

Alexc wrote:
> Hi,
> Sounds like vyatta vc3 has a problem with NAT, I want to map not routed
> IPs to real ones with static one-to-one NAT, I did according to manual
> butr all packets go out with single IP. 
> Please look at config and iptables output below, did I make any error
> in configuration?
> 
> service {
>     nat {
>         rule 10 {
>             type: "source"
>             inbound-interface: "vif30"
>             outbound-interface: "eth1"
>             inside-address {
>                 address: 10.10.1.1
>             }
>             outside-address {
>                 address: 194.90.41.4
>             }
>         }
_______________________________________________
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users

Reply via email to