Forum Discussion
Sep 16, 2013
Hi Darshan,
the datagroup based version is more flexible regarding subnet mask length. Using the following 'switch' based approach limits you to a fixed subnet mask length.when CLIENT_ACCEPTED {
switch [IP::addr [IP::client_addr] mask 255.255.255.0] {
10.10.1.0 { snat 10.232.232.1 }
10.10.2.0 { snat 10.232.232.2 }
10.10.3.0 { snat 10.232.232.3 }
default { snat 10.232.232.4 }
}
}
Thanks,
Stephan