Closed guillierf closed 6 years ago
for now, the SNAT rule in the param file looks like this:
SNAT is dangerous when the destination network is too wide (i.e destination IP = ANY).
for PKS, we usually restrict the destination IP to a specific CIDR (we don't use ANY because it can break internal communications, from T1 to T1).
request is to be able to specify destination IP (or destination_network) in the above NAT section
added destination_network as optional param for snat rule set.
for now, the SNAT rule in the param file looks like this:
Sample entry for PKS PKS-Infra network
SNAT is dangerous when the destination network is too wide (i.e destination IP = ANY).
for PKS, we usually restrict the destination IP to a specific CIDR (we don't use ANY because it can break internal communications, from T1 to T1).
request is to be able to specify destination IP (or destination_network) in the above NAT section