SNATing servers

[axfalk]

We're running ACE SM (A2_1_.5a) in bridge mode and have 4 rservers in the serverfarm, where 2 of them are directly connected and the other 2 are disjointed. We would obviously have to SNAT the disjointed servers, however since they are all in the same serverfarm, would probably have to SNAT the directly connected ones as well, which is an overkill. Can we do SNAT on a server level or only on the layer 7 policy level?

Thanks..

[Gilles Dufour]

If your remote servers are accessible through a different interface than the local ones, there will be no problem.

The dynamic nat command takes the outgoing vlan as a parameter.

If the traffic is not forwarded through that vlan, it is not nated.

Gilles.