SD-WAN

 View Only
last person joined: 4 days ago 

Ask questions and share experiences with SD-WAN and Session Smart Router (formerly 128T).
  • 1.  Source NAT

     
    Posted 11-27-2018 16:53
    What happens if I have source-nat set to "disabled" on the network-interface, but set to "network interface" on the service? Will it not source NAT? Does source NATting only work if it is set to "enabled" on the network-interface and "network interface" on the service?

    ------------------------------
    Justin Melloni
    Documentation/Training Specialist
    MA
    ------------------------------


  • 2.  RE: Source NAT

     
    Posted 11-27-2018 21:46
    @Justin a service's source-nat setting should default to network-interface​, which effectively means if a session going to the service egresses a network-interface having the setting source-nat true, the session's source will be translated to that network-interface address.

    If the egress network-interface has source-nat false (the default value for a network-interface), then no translation is applied no matter if the service is .

    To summarize, here is the behavior I think you'd see with the various settings combinations:

    • service source-nat network-interface + egress network-interface source-nat false = no translation applied
    • service source-nat network-interface + egress network-interface source-nat true = source translated to egress network-interface address
    • service source-nat disabled + egress network-interface source-nat false = no translation applied
    • service source-nat disabled + egress network-interface source-nat true = no translation applied


    ------------------------------
    - Reid
    ------------------------------



  • 3.  RE: Source NAT

     
    Posted 11-28-2018 13:28
    Basically when a service's source-nat setting is set to "network-interface", that service will inherit the source-nat setting provisioned on a network-interface that is being used for egress.

    If the service's source-nat setting is set to disabled, then this will override whatever value is provisioned on an egress interface.

    ------------------------------
    Gene Shtirmer
    Sales Engineer
    Burlington MA
    ------------------------------