VMware Networking Community
Hamidreza74
Enthusiast
Enthusiast

NSX-T Tier 0 SNAT in active active

Hi
base on Doc we can use Reflexive NAT instead of SNAT and DNAT in active/active scenarios, how can I SNAT clients to reach the internet?
I use SNAT in tier 1 but it doesn't work properly.

0 Kudos
4 Replies
CyberNils
Hot Shot
Hot Shot

Hi,

I don't think that would be practical since Reflexive NAT requires a one to one relationship between your source and your translated IP addresses. I would recommend you figure out why it doesn't work on your T1 or do SNAT on your external firewall.



Nils Kristiansen
https://cybernils.net/
0 Kudos
Hamidreza74
Enthusiast
Enthusiast

Thanks. are you try to SNAT in Tier1  for Client Internet Access ?

 

0 Kudos
CyberNils
Hot Shot
Hot Shot

Please post a screenshot of you config and maybe we can spot the problem.



Nils Kristiansen
https://cybernils.net/
0 Kudos
Hamidreza74
Enthusiast
Enthusiast

solved, translated IP address was not reachable. I changed and done 

0 Kudos