Application Delivery (ADX)

Reply
Contributor
Posts: 39
Registered: ‎05-04-2009

Do I need a "for-ssl" source-nat-ip using router/L3 code?

Do I need a "for-ssl" source-nat-ip using router/L3 code?

Super Contributor
Posts: 316
Registered: ‎05-01-2009

Re: Do I need a "for-ssl" source-nat-ip using router/L3 code?

Running router code / PREM code the ServerIron uses the VE address to do source NAT by default. It is not required to add a server source-nat-ip. This is for non-ssl traffic.only. You have to define a special source-nat-ip for ssl in case you are doing SSL termination with source NAT.

You have to add something like

server source-nat-ip a.b.c.d mask 0.0.0.0 port-range 1|2 for-ssl

to the config.

Join the Community

Get quick and easy access to valuable resource designed to help you manage your Brocade Network.