Re: [j-nsp] Doing SNAT only for destinations learned from a specific BGP peering
Martin Tonusoo via juniper-nsp <[email protected]> Mon, 27 Apr 2026 00:32:15 +0300
| Newsgroups | gmane.network.nsp.juniper |
|---|---|
| Message-ID | <CADJxXUKjTsttMwBGh5wKxYqxDJ_fuXNQX1e+HV13kzhw4GVfjA@mail.gmail.com> |
SGkuCgpXaXRoIG11bHRpc2VydmljZXMgbGluZS1jYXJkLCB0aGUgUEFUIGNvbmZpZ3VyYXRpb24g Y291bGQgYmUgc29tZXRoaW5nCmxpa2UgdGhpczoKCnJvb3RAbGFiLW14OTYwPiBzaG93IGNvbmZp Z3VyYXRpb24gc2VydmljZXMKc2VydmljZS1zZXQgcGF0LXNlcnZpY2Utc2V0IHsKICAgIG5hdC1y dWxlcyBydWxlLW5hcHQtNDQ7CiAgICBpbnRlcmZhY2Utc2VydmljZSB7CiAgICAgICAgLyogZmly c3QgUElDIG9mIE1TLURQQyBpbiBzbG90IDk7IE11bHRpc2VydmljZXMgTUlDIHNob3VsZCB1c2UK Im1zIiBpbnRlcmZhY2UgaW5zdGVhZCBvZiAic3AiIGludGVyZmFjZSAgKi8KICAgICAgICBzZXJ2 aWNlLWludGVyZmFjZSBzcC05LzAvMDsKICAgIH0KfQpuYXQgewogICAgcG9vbCBuYXB0LXBvb2wg ewogICAgICAgIGFkZHJlc3MgMTAuMS4xLjEvMzI7CiAgICAgICAgcG9ydCB7CiAgICAgICAgICAg IGF1dG9tYXRpYyB7CiAgICAgICAgICAgICAgICByYW5kb20tYWxsb2NhdGlvbjsKICAgICAgICAg ICAgfQogICAgICAgIH0KICAgIH0KICAgIHJ1bGUgcnVsZS1uYXB0LTQ0IHsKICAgICAgICBtYXRj aC1kaXJlY3Rpb24gb3V0cHV0OwogICAgICAgIC8qIHN1Y2ggc2ltcGxlIGNvbmYgd2lsbCBhbHNv IHB1bnQgdGhlIEwzVlBOIEJHUCBzZXNzaW9uCnRyYWZmaWMgdG8gbXVsdGlzZXJ2aWNlcyBsaW5l LWNhcmQgKi8KICAgICAgICB0ZXJtIG1hdGNoLWFsbCB7CiAgICAgICAgICAgIHRoZW4gewogICAg ICAgICAgICAgICAgdHJhbnNsYXRlZCB7CiAgICAgICAgICAgICAgICAgICAgc291cmNlLXBvb2wg bmFwdC1wb29sOwogICAgICAgICAgICAgICAgICAgIHRyYW5zbGF0aW9uLXR5cGUgewogICAgICAg ICAgICAgICAgICAgICAgICBuYXB0LTQ0OwogICAgICAgICAgICAgICAgICAgIH0KICAgICAgICAg ICAgICAgIH0KICAgICAgICAgICAgfQogICAgICAgIH0KICAgIH0KfQoKcm9vdEBsYWItbXg5NjA+ Cgpyb290QGxhYi1teDk2MD4gc2hvdyBjb25maWd1cmF0aW9uIGludGVyZmFjZXMKZ2UtMi8xLzYg ewogICAgZGVzY3JpcHRpb24gTDNWUE47CiAgICB1bml0IDAgewogICAgICAgIGZhbWlseSBpbmV0 IHsKICAgICAgICAgICAgc2VydmljZSB7CiAgICAgICAgICAgICAgICBpbnB1dCB7CiAgICAgICAg ICAgICAgICAgICAgc2VydmljZS1zZXQgcGF0LXNlcnZpY2Utc2V0OwogICAgICAgICAgICAgICAg fQogICAgICAgICAgICAgICAgb3V0cHV0IHsKICAgICAgICAgICAgICAgICAgICBzZXJ2aWNlLXNl dCBwYXQtc2VydmljZS1zZXQ7CiAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgIH0KICAgICAg ICAgICAgYWRkcmVzcyAxMC4xLjEuMS8zMTsKICAgICAgICB9CiAgICB9Cn0KZ2UtMi8xLzggewog ICAgZGVzY3JpcHRpb24gTEFOOwogICAgdW5pdCAwIHsKICAgICAgICBmYW1pbHkgaW5ldCB7CiAg ICAgICAgICAgIGFkZHJlc3MgMTAuNC40LjEvMjQ7CiAgICAgICAgfQogICAgfQp9CnNwLTkvMC8w IHsKICAgIHVuaXQgMCB7CiAgICAgICAgZmFtaWx5IGluZXQ7CiAgICB9Cn0KZnhwMCB7CiAgICB1 bml0IDAgewogICAgICAgIGZhbWlseSBpbmV0IHsKICAgICAgICAgICAgZGhjcDsKICAgICAgICB9 CiAgICB9Cn0KCnJvb3RAbGFiLW14OTYwPgoKClRoaXMgd2FzIHRlc3RlZCBvbiBNWDk2MCBydW5u aW5nIEp1bm9zIDE5LjQgd2l0aCBsZWdhY3kgTVMtRFBDOgoKcm9vdEBsYWItbXg5NjA+IHNob3cg Y2hhc3NpcyBmcGMgcGljLXN0YXR1cyA5ClNsb3QgOSAgIE9ubGluZSAgICAgICBNUy1EUEMKICBQ SUMgMCAgT25saW5lICAgICAgIE1TLURQQyBQSUMKICBQSUMgMSAgT25saW5lICAgICAgIE1TLURQ QyBQSUMKCnJvb3RAbGFiLW14OTYwPgoKTmV3ZXIgSnVub3MgcmVsZWFzZXMgbGlrZSAyMS40IG5v IGxvbmdlciBzdXBwb3J0IHRoZSBNUy1EUEMuCgpOQVQgc3RhdGUgdGFibGUgd2hlbiB0aGVyZSB3 ZXJlIDEwLjQuNC4xMCAtPiAxMC4xLjEuMDoxMjM0IGFuZAoxMC40LjQuMjAgLT4gMTAuMS4xLjA6 MTIzNCBUQ1Agc2Vzc2lvbnMgZXN0YWJsaXNoZWQgYW5kICJwaW5nIC1JCjEwLjQuNC4zMCAxMC4x LjEuMCIgcnVubmluZzoKCnJvb3RAbGFiLW14OTYwPiBzaG93IHNlcnZpY2VzIHN0YXRlZnVsLWZp cmV3YWxsIGNvbnZlcnNhdGlvbnMKc2VydmljZS1zZXQgcGF0LXNlcnZpY2Utc2V0CkludGVyZmFj ZTogc3AtOS8wLzAsIFNlcnZpY2Ugc2V0OiBwYXQtc2VydmljZS1zZXQKCkNvbnZlcnNhdGlvbjog QUxHIHByb3RvY29sOiB0Y3AKICBOdW1iZXIgb2YgaW5pdGlhdG9yczogMSwgTnVtYmVyIG9mIHJl c3BvbmRlcnM6IDEKRmxvdyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFN0YXRlICAgIERpciAgICAgICBGcm0gY291bnQKVENQICAgICAgICAgICAxMC40LjQu MjA6MzMxNzEgIC0+ICAgICAgICAxMC4xLjEuMDoxMjM0ICAgRm9yd2FyZCAgTwogICAgICAgICAg MTUKICAgIE5BVCBzb3VyY2UgICAgICAgICAgICAxMC40LjQuMjA6MzMxNzEgICAtPiAgICAgICAg MTAuMS4xLjE6NjAzMzkKVENQICAgICAgICAgICAgMTAuMS4xLjA6MTIzNCAgIC0+ICAgICAgICAx MC4xLjEuMTo2MDMzOSAgRm9yd2FyZCAgSQogICAgICAgICAgMTQKICAgIE5BVCBkZXN0ICAgICAg ICAgICAgICAgMTAuMS4xLjE6NjAzMzkgICAtPiAgICAgICAxMC40LjQuMjA6MzMxNzEKCkNvbnZl cnNhdGlvbjogQUxHIHByb3RvY29sOiBpY21wCiAgTnVtYmVyIG9mIGluaXRpYXRvcnM6IDEsIE51 bWJlciBvZiByZXNwb25kZXJzOiAxCkZsb3cgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBTdGF0ZSAgICBEaXIgICAgICAgRnJtIGNvdW50CklDTVAgICAgICAg ICAgMTAuNC40LjMwICAgICAgICAtPiAgICAgICAgMTAuMS4xLjAgICAgICAgIFdhdGNoICAgIE8K ICAgICAgICAgMTY4CiAgICBOQVQgc291cmNlICAgICAgICAgICAgMTAuNC40LjMwICAgICAgICAg LT4gICAgICAgIDEwLjEuMS4xCklDTVAgICAgICAgICAgIDEwLjEuMS4wICAgICAgICAtPiAgICAg ICAgMTAuMS4xLjEgICAgICAgIFdhdGNoICAgIEkKICAgICAgICAgMTY4CiAgICBOQVQgZGVzdCAg ICAgICAgICAgICAgIDEwLjEuMS4xICAgICAgICAgLT4gICAgICAgMTAuNC40LjMwCgpDb252ZXJz YXRpb246IEFMRyBwcm90b2NvbDogdGNwCiAgTnVtYmVyIG9mIGluaXRpYXRvcnM6IDEsIE51bWJl ciBvZiByZXNwb25kZXJzOiAxCkZsb3cgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBTdGF0ZSAgICBEaXIgICAgICAgRnJtIGNvdW50ClRDUCAgICAgICAgICAg MTAuNC40LjEwOjYwMzg1ICAtPiAgICAgICAgMTAuMS4xLjA6MTIzNCAgIEZvcndhcmQgIE8KICAg ICAgICAgIDE3CiAgICBOQVQgc291cmNlICAgICAgICAgICAgMTAuNC40LjEwOjYwMzg1ICAgLT4g ICAgICAgIDEwLjEuMS4xOjM5NzIzClRDUCAgICAgICAgICAgIDEwLjEuMS4wOjEyMzQgICAtPiAg ICAgICAgMTAuMS4xLjE6Mzk3MjMgIEZvcndhcmQgIEkKICAgICAgICAgIDE2CiAgICBOQVQgZGVz dCAgICAgICAgICAgICAgIDEwLjEuMS4xOjM5NzIzICAgLT4gICAgICAgMTAuNC40LjEwOjYwMzg1 Cgpyb290QGxhYi1teDk2MD4KCgpGaW5hbGx5LCBpdCdzIHdvcnRoIG5vdGluZyB0aGF0IHRoZSBy ZWxhdGVkIElDTVAgcGFja2V0cyBhcmUgYWxsb3dlZApieSBkZWZhdWx0LCBlLmcgaWYgdGhlcmUg YXJlIFVEUCBmbG93cyBmb3IgdHJhY2Vyb3V0ZSwgdGhlbiB0aGUKcmVsYXRlZCBJQ01QICJkc3Qg cG9ydCB1bnJlYWNoYWJsZSIgbWVzc2FnZXMgYXJlIGFsbG93ZWQgdGhyb3VnaDoKCiQgc3VkbyBp cCBuZXRucyBleGVjIGxhbiB0cmFjZXJvdXRlIC1uIDEwLjEuMS4wCnRyYWNlcm91dGUgdG8gMTAu MS4xLjAgKDEwLjEuMS4wKSwgMzAgaG9wcyBtYXgsIDYwIGJ5dGUgcGFja2V0cwogMSAgMTAuNC40 LjEgIDIuNDU0IG1zICAyLjQyMSBtcyAgMi40NzQgbXMKIDIgIDEwLjEuMS4wICAwLjU1MCBtcyAg MC40NzkgbXMgIDAuNDc2IG1zCiQKCgpNYXJ0aW4KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18KanVuaXBlci1uc3AgbWFpbGluZyBsaXN0IGp1bmlwZXItbnNw QHB1Y2submV0aGVyLm5ldApodHRwczovL3B1Y2submV0aGVyLm5ldC9tYWlsbWFuL2xpc3RpbmZv L2p1bmlwZXItbnNwCg==