nat server on CSM

[huangedmc]

Exactly what does "nat server" do on CSM's?

Does it NAT all incoming traffic from client to server w/ the VIP, or NAT return packets back to client w/ VIP as source? or both?

[Gilles Dufour]

it does what the command says it does :-)

It nats the vip address with the server address before forwarding the client traffic to the server.

When the server responds, it does the opposite.

If you want to nat the client ip address, you need the 'nat client' command.

Gilles.

[huangedmc]

What if the server INITIATES the connection to client, does "nat server" also nat the outbound connections, so that clients would see the VIP instead of the real IP?

[Gilles Dufour]

no. That config only applies to connections hitting the vip.

For connections initiated by the server and not hitting any content rule, nating is done with the 'static nat' command.

Gilles.