Configure SNAT for VFP on the Corporation-A router

An example of how to configure SNAT for VFP on the Corporation-A router.

Note: You do not need to configure a VFP on the peer router. The Corporation-B router in this example can be configured with a standard policy-based configuration.

Specify SNAT for packets coming into the router from client 10.0.2.0/24.

vyatta@CORPA# set service nat source rule 10 source address 10.0.2.0/24

Translates addresses coming in from that client to 10.0.3.0/24.

vyatta@CORPA# set service nat source rule 10 translation address 10.0.3.0/24

Ties packets that have been translated to 10.0.3.0/24 to the VFP interface as they pass through the VPN tunnel.
```
vyatta@CORPA#set service nat source rule 10 outbound-interface vfp1
```

Vyatta documentation

Learn how to install, configure, and operate the Vyatta Network Operating System (Vyatta NOS) and Orchestrator, which help drive our virtual networking and physical platforms portfolio.

Configure SNAT for VFP on the Corporation-A router

Helpful Links

Key Resources