internal 1 to internal 2 no masquerading

Akira78 · #1 (**permalink**) 02-03-2004, 05:22 PM

Hello,

I have 3 networks : LAN1 , LAN2 and LAN3

I want to set up masquerading for LAN1 to go to Internet, but i don't want that when a packet go from LAN1 to LAN2 or LAN3 the masquerading rule operate.

I've tried to set a DNAT/SNAT rule that say:
Src: LAN1, dest : LAN2 service : ANY, No change, No change
but ASL don't let me do.

So i've tried :
Src: LAN1, dest : LAN2 service : ANY, LAN1 No change
It was accepted but it looks wreid for me. Which address will be used in the pool LAN1 for the translation?

And after i do my classical masquerading rule for LAN1 to internet.

And first of all is it the good method?

Thanks.

Akira78 · #2 (**permalink**) 02-04-2004, 08:47 AM

Sorry this is a false trouble, my mind is too "checkpoint" formated...
Astaro only do the masquerading when the paquet go through the external interface not on ALL interfaces like in checkpoint...