I have 50+ specific /32 IPs that I need to inline-nat from private to public IPs. How can I add that many into my setup? I'm using an MX480 with two MPC 3D 16x 10GE line cards.
I'm using a service set:
service-set STATIC-SRC-NAT-1 {
nat-rules SRC-NAT-RULE;
next-hop-service {
inside-service-interface si-0/1/0.100;
outside-service-interface si-0/1/0.200;
}
}
with the nat rules:
rule SRC-NAT-RULE {
match-direction input;
term t1 {
from {
source-address {
10.54.0.109/32; # <-- an issue here
}
}
then {
translated {
source-pool STATIC-NAT-PUBLICS; # <-- Wish I could use a prefix-list...
translation-type {
basic-nat44;
}
}
}
}
}
With this, I can set source to a /24 and have a public /24 in the source pool (and that works), but I need a lot of explicit private/32 to public/32. The from { source-address } won't let you have more than one entry. The same goes with: from { source-prefix-list }. And even if I could there, I can only have 32 entries max in a nat pool.
Ideally, I wish I could have 2 preflix lists with all the /32s I could want in each, and have them match up 1:1. 😕 Any suggestions?