Skip to main content
joao_morais
New Member
November 6, 2018
Question

Virtual IP (VIP): extintf vs srcintf-filter

  • November 6, 2018
  • 0 replies
  • 2836 views

Hi everyone,

 

From the 5.6 docs:

 

extintf: Interface connected to the source network that receives the packets that will be forwarded to the destination network srcintf-filter: Interfaces to which the VIP applies. Separate the names with spaces.

 

Quite similar definitions. From a practical standpoint however it seems like extintf is used for configuration purposes namely to define if the VIP can be used in a policy, while srcintf-filter is used to actual decide whether a DNAT is applied or not.

 

Is this correct or am I missing something?

 

Thank you in advance.