On Wed, 2008-01-23 at 08:28 -0800, An-Cheng Huang wrote:
> Hi Alexc,
>
> In your source NAT rules, you should set the "source address" *instead of*
> the "inside-address". For example, for rule 10, you should do "set service
> nat rule 10 source address 10.10.1.1" instead of setting the
> "inside-address". Let me know if this does what you want. Thanks!
Many thanks, It did the work. I guess, I have to read manual again :).
BTW, I've got an error, something about not found, on 'delete service
nat rule 10 inside-address address 10.10.1.1'.
I had to remove the rule completely first.
Thanks, Alexc.
>
> An-Cheng
>
> Alexc wrote:
> > Hi,
> > Sounds like vyatta vc3 has a problem with NAT, I want to map not routed
> > IPs to real ones with static one-to-one NAT, I did according to manual
> > butr all packets go out with single IP.
> > Please look at config and iptables output below, did I make any error
> > in configuration?
> >
> > service {
> > nat {
> > rule 10 {
> > type: "source"
> > inbound-interface: "vif30"
> > outbound-interface: "eth1"
> > inside-address {
> > address: 10.10.1.1
> > }
> > outside-address {
> > address: 194.90.41.4
> > }
> > }
_______________________________________________
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users
