Change outgoing NAT

is it something like this?

when CLIENT_ACCEPTED {
   if { [class match -- [IP::local_addr] equals dest1_dg] } {
      snat 1.1.1.1
   } elseif { [class match -- [IP::local_addr] equals dest2_dg] } {
      snat 2.2.2.2
   } else {
      snat 3.3.3.3
   }
}

Thanks, yes that looks like what we are trying. Would it be possible to create pools for the sets1_dg and dest2_dg?

Yes, you could assign a specific pool in each clause.

when CLIENT_ACCEPTED {
   if { [class match -- [IP::local_addr] equals dest1_dg] } {
      snat 1.1.1.1
      pool pool_a
   } elseif { [class match -- [IP::local_addr] equals dest2_dg] } {
      snat 2.2.2.2
      pool pool_b
   } else {
      snat 3.3.3.3
      pool pool_c
   }
}

Aaron

Will something like this work?

 

 

when CLIENT_ACCEPTED {

 

if { [class match -- [IP::local_addr] equals pool pool_a] } {

 

snat 1.1.1.1

 

} elseif { [class match -- [IP::local_addr] equals pool pool_b] } {

 

snat 2.2.2.2

 

} else {

 

snat 3.3.3.3

 

}

 

}

dest1_dg and dest2_dg are data group containing destination ip address. why do you want to use pool (in class match) instead??

We will have multiple destinations which need the same originating address.

 

 

Example google.com can resolve to multiple IP addresses.

We will have multiple destinations which need the same originating address.

 

 

Example google.com can resolve to multiple IP addresses.yes, that is why we use data group containing those destination addresses, don't we?