Hi Alexc, In your source NAT rules, you should set the "source address" *instead of* the "inside-address". For example, for rule 10, you should do "set service nat rule 10 source address 10.10.1.1" instead of setting the "inside-address". Let me know if this does what you want. Thanks!
An-Cheng Alexc wrote: > Hi, > Sounds like vyatta vc3 has a problem with NAT, I want to map not routed > IPs to real ones with static one-to-one NAT, I did according to manual > butr all packets go out with single IP. > Please look at config and iptables output below, did I make any error > in configuration? > > service { > nat { > rule 10 { > type: "source" > inbound-interface: "vif30" > outbound-interface: "eth1" > inside-address { > address: 10.10.1.1 > } > outside-address { > address: 194.90.41.4 > } > } _______________________________________________ Vyatta-users mailing list Vyatta-users@mailman.vyatta.com http://mailman.vyatta.com/mailman/listinfo/vyatta-users