Forum Discussion

2 Replies

  • I am assuming I can, because I know we can SNAT on the same subnet. Does anyone have an example of how to make this work?
  • hello,

    my guess would be something like this below that uses data groups to define what the client ip would match in order to be snat'd. my example below says use snat default would be an ending like snat automap, but the rule below has snat none.

    when CLIENT_ACCEPTED {
    log local0. "[IP::client_addr]:[TCP::client_port]: New connection to [IP::local_addr]:[TCP::local_port]"
    if {[matchclass [IP::client_addr] equals EXTERNAL_SUBNET]}{
       log local0. "[IP::client_addr]:[TCP::client_port]: Matched EXTERNAL SUBNET"
      snat X.X.X.X
     } else {
       log local0. "[IP::client_addr]:[TCP::client_port]: No match, using default snat"
      snat none  
    }
    

    }