Ok, but if i need to SNAT a whole subnet 192.168.1.0/24 with a short pool of address like 172.16.1.1-172.16.1.10Hi, You probably want to look at the NETMAP target that is in patch-o-matic. SNAT and DNAT targets will do some loadbalancing. You'll get weird results with your setup. With NETMAP you can do source NAT and destination NAT of whole subnets with a strict 1:1 mapping.
with a strict 1:1 only 10 ip are natted.
NETMAP give me the ability to write down a PAT address for the rest of connections?
Or for short pool it's better to setup interfaces aliases?
Thanks.
Giulius.
Regards,
Filip