Hi all, I encountered the following situation and would like to
understand more the mechanism behind. I am setting up Virtual IP port
forwarding and IPv4 policy object, such that I can ssh to private
machine from public IP, for example, public_ip:220...
ede_pfau wrote:hi, and welcome to the forums.The explanation is quite
simple:a VIP does DNAT. NAT is done before matching the policy. So the
service field in the policy needs to match the translated port.There is
a document about this, "Life of a pac...
