ACE - SNAT with VIP Address

[Jaime Soto Valenzuela]

Hi everyone,

I have implemented an ACE in One Arm mode, and I need to know if is possible to apply SNAT with the same IP used as VIP address.

For example:

class-map match-all port-80-redaccion

  2 match virtual-address 200.10.1.42 tcp eq www

interface vlan 200

  ip address 200.10.1.225 255.255.255.0

  nat-pool 1 200.10.1.42 200.10.1.42 netmask 255.255.255.0 pat

Regards,

Jaime.

[Andrew Nam]

Hi Jaime

I am trying to remember this. In ealier code I think A1.x it didn't support this but from A2.x I think you can apply SNAT with the same IP used as VIP address.

To me better practice to apply SNAT is using ip address other than vip.

regards

Andrew

[Jaime Soto Valenzuela]

Thanks Andrew,

Yes I think the same as you, this is not a best practice but our client wants to do it. So we were reviewing and finally we applied the VIP as SNAT and is working fine.

Thanks and regards,

Jaime.