Forum Discussion

shailendra_8188's avatar
shailendra_8188
Icon for Nimbostratus rankNimbostratus
Jan 30, 2012

SNAT access is Port specific?

Hi Guys,

 

 

Need some clarification as not sure. Does SNAT is port specific or it allows outbound access on all ports. Hv Server configured under SNAT requires a SSH access to external Server, Does require any specific config or it should work with the default SNAT config?

 

 

-Shailendra
  • Does require any specific config or it should work with the default SNAT config?it should work. there is no port setting when configuring snat (except combination with irule).
  • Hi shailendra,

     

     

    You could use a SNAT for outbound traffic. By default it would allow any allowed client (or any client on an allowed VLAN) to originate traffic through the SNAT to any destination host or port.

     

     

    However, I think it's more functional to use a wildcard virtual server enabled on specific VLANs that you want to allow traffic from with SNAT enabled. With a virtual server you also have the ability to use an iRule to add more logic on restricting which clients, ports or destinations can use the virtual.

     

     

    Aaron