src-nat & masquerade

sadeghrafie · Wed Nov 09, 2011 4:37 pm

Hi,

Do these two code do the same?
What difference?

add action=masquerade chain=srcnat disabled=no src-address=192.168.99.0/24

add action=src-nat chain=srcnat disabled=no dst-address=0.0.0.0/0 src-address=192.168.99.0/24 to-addresses="my public IP"

fewi · Wed Nov 09, 2011 6:15 pm

'src-nat' always translates to the specified address. 'masquerade' dynamically translates to the preferred IP address configured on the out-interface.

对静态IP接口的best practice to use 'src-nat'. For dynamic IP interfaces it's necessary to use 'masquerade'.

src-nat & masquerade

src-nat & masquerade

Re: src-nat & masquerade

Who is online