VyOS謎たち

gistfile1.txt

SourceNATの謎

eth1を使うと変わらない〜

---

set nat source rule 10 outbound-interface 'eth0'
set nat source rule 10 source address '10.0.0.0/8'
set nat source rule 10 translation address 'masquerade'

vyos@vyos:~$ show nat source rules        
Disabled rules are not shown
Codes: X - exclude rule, M - masquerade rule

rule    intf              translation                                               
----    ----              -----------                                               
M10     eth0              saddr 10.0.0.0/8 to 10.x.131.157                        
        proto-all         sport ANY                                                     

vyos@vyos:~$ show nat source translations 
Pre-NAT              Post-NAT             Prot  Timeout 
10.x.153.182       10.x.131.157       icmp  29      

---

set nat source rule 10 outbound-interface 'eth1'
set nat source rule 10 source address '10.0.0.0/8'
set nat source rule 10 translation address 'masquerade'


vyos@vyos:~$ show nat source rules 
Disabled rules are not shown
Codes: X - exclude rule, M - masquerade rule

rule    intf              translation                                               
----    ----              -----------                                               
M10     eth1              saddr 10.0.0.0/8 to 10.x.131.31                         
        proto-all         sport ANY                                                     


vyos@vyos:~$ show nat source translations 
Pre-NAT              Post-NAT             Prot  Timeout 
10.x.153.182       10.x.153.182       icmp  28    

＃変わってない〜

VyOS 1.0.5, 1.1.3, 1.1.5 ともに同じ感じ

masqueradeはPOSTROUTINGだから、単純にルーティングが向いていないのかも・・・