Forum Discussion

Donald_William1's avatar
Donald_William1
Icon for Nimbostratus rankNimbostratus
Dec 02, 2005

Selective SNAT based on Data Group

I have two 6400s (active/standby) running 9.1 load balancing two ftp servers. I need to selectively SNAT the source based on a data group. The data group has a list of networks that I want to SNAT for. Everything else I don't want to SNAT. I have not been able to find an example of this. Can someone help?

 

 

This is what I have slapped together.

 

 

class dg_SRCNets {

 

network 10.0.0.0 mask 255.0.0.0

 

network 192.168.0.0 mask 255.255.255.0

 

}

 

 

when CLIENT_ACCEPTED {

 

if {[matchclass[IP::client_addr] eq $::dg_SRCNets]} {

 

snat automap}

 

else {

 

snat none}

 

}

 

 

I have no idea if this is correct...