vEdge traffic access from transport side to service side

[henry.h]

Hi,

Is it possible for internet traffic from vpn 0 (Internet) to access a service side server on the LAN without NAT on the vEdge?

the topology is like the following:

LAN 1 - vEdge1 -----Internet----- vEdge2 - Firewall - DC LAN

Users from the Internet will need access to the servers in the DC by using their public addresses (NAT and policy controlled by the Firewall.

Thanks.

[ekhabaro · Accepted solution]

no, it's not possible since transport side and service side are isolated VPNs (same concept like on IOS with VRFs).

[henry.h]

Thanks.