Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

Re: Help troubleshooting Hairpin NAT

$
0
0

Just in case this will help someone else with roughly the same config as me, here was my resolution;

 

firewall modify SOURCE_ROUTE_2255
 rule 10 {
     description "Hairpin NAT exclusion"
     destination {
         address 10.100.0.0/16
     }
     modify {
         table main
     }
     source {
         address 10.100.0.0/16
     }
 }
 rule 20 {
     action modify
     description "Traffic outbound on Eth6 Swiftway"
     modify {
         table 6
     }
     source {
         group {
             address-group Outbound_Eth6
         }
     }
 }
 rule 30 {
     action modify
     description "Traffic outbound on Eth7 AtlanticMetro"
     modify {
         table 7
     }
     source {
         group {
             address-group Outbound_Eth7
         }
     }
 }
 rule 40 {
     action modify
     description "Traffic outbound on default table"
     modify {
         table main
     }
     source {
         address 10.100.255.0/24
     }
 }

 service nat rule 1
 description "SCI Hosted Labtech with Hairpin"
 destination {
     address 37.x.X.35
     group {
     }
 }
 inbound-interface eth+
 inside-address {
     address 10.100.255.14
 }
 log disable
 protocol all
 }
 type destination

service nat rule 5000
 description "Hairpin NAT"
 destination {
     group {
         address-group 10.100.0.0/16
     }
 }
 log disable
 outbound-interface eth+
 outside-address {
 }
 protocol all
 source {
     group {
         address-group 10.100.0.0/16
     }
 }
 type masquerade

Viewing all articles
Browse latest Browse all 60861

Trending Articles