topic Use of content rule vs source group for NATing in Application Networking https://community.cisco.com/t5/application-networking/use-of-content-rule-vs-source-group-for-nating/m-p/716411#M13632 <P>To NAT outgoing flows out of two servers, is it necessary to define a content rule and source group (or is just a source group sufficient?).</P><P></P><P>Having trouble with Option 2. </P><P></P><P>Option 1:</P><P></P><P>service svr1</P><P>ip address 192.168.10.1</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>Also does CSS do NAPT i.e. alter the source port number for outgoing packets from source groups?</P><P> </P><P></P><P>service svr2</P><P>ip address 192.168.10.2</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>content outflows</P><P>protocol tcp</P><P>add service svr1</P><P>add service svr2</P><P>vip address &lt;externalip&gt;</P><P>active</P><P></P><P>group outgrp</P><P>vip address &lt;external ip&gt;</P><P>add service svr1</P><P>add service svr2</P><P>active</P><P></P><P>&lt;add appropriate acl&gt;</P><P></P><P>Option 2:</P><P></P><P></P><P>service svr1</P><P>ip address 192.168.10.1</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>service svr2</P><P>ip address 192.168.10.2</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>group outgrp</P><P>vip address &lt;external ip&gt;</P><P>add service svr1</P><P>add service svr2</P><P>active</P><P></P><P>&lt;add appropriate acl&gt;</P><P></P> Wed, 30 May 2007 21:24:39 GMT soumya.sarkar 2007-05-30T21:24:39Z Use of content rule vs source group for NATing https://community.cisco.com/t5/application-networking/use-of-content-rule-vs-source-group-for-nating/m-p/716411#M13632 <P>To NAT outgoing flows out of two servers, is it necessary to define a content rule and source group (or is just a source group sufficient?).</P><P></P><P>Having trouble with Option 2. </P><P></P><P>Option 1:</P><P></P><P>service svr1</P><P>ip address 192.168.10.1</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>Also does CSS do NAPT i.e. alter the source port number for outgoing packets from source groups?</P><P> </P><P></P><P>service svr2</P><P>ip address 192.168.10.2</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>content outflows</P><P>protocol tcp</P><P>add service svr1</P><P>add service svr2</P><P>vip address &lt;externalip&gt;</P><P>active</P><P></P><P>group outgrp</P><P>vip address &lt;external ip&gt;</P><P>add service svr1</P><P>add service svr2</P><P>active</P><P></P><P>&lt;add appropriate acl&gt;</P><P></P><P>Option 2:</P><P></P><P></P><P>service svr1</P><P>ip address 192.168.10.1</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>service svr2</P><P>ip address 192.168.10.2</P><P>no port</P><P>protocol tcp</P><P>active</P><P></P><P>group outgrp</P><P>vip address &lt;external ip&gt;</P><P>add service svr1</P><P>add service svr2</P><P>active</P><P></P><P>&lt;add appropriate acl&gt;</P><P></P> Wed, 30 May 2007 21:24:39 GMT https://community.cisco.com/t5/application-networking/use-of-content-rule-vs-source-group-for-nating/m-p/716411#M13632 soumya.sarkar 2007-05-30T21:24:39Z Re: Use of content rule vs source group for NATing https://community.cisco.com/t5/application-networking/use-of-content-rule-vs-source-group-for-nating/m-p/716412#M13633 <HTML><HEAD></HEAD><BODY><P>to nat connections initiated by the server, you only need a source group.</P><P>No need for a content rule.</P><P>The CSS will port nat.</P><P></P><P>Gilles.</P></BODY></HTML> Thu, 31 May 2007 06:35:00 GMT https://community.cisco.com/t5/application-networking/use-of-content-rule-vs-source-group-for-nating/m-p/716412#M13633 Gilles Dufour 2007-05-31T06:35:00Z