Feature request thoughts - around nat selection

[Alex_Samad]

Hi

I have 2 NAT pools, actually 4, cause for HA each pool is doubled - does that make sense.

1 pool is on a.b.c.13 and the second is on a.b.c.113.

All good. what I would like to do is say

going out internet interface from src group "out via non prod" nat to a.b.c.113

going out internet interface from src group "inside ip address" nat to a.b.c.13

but  there are some addresses that need to only go via the prod ip (a.b.c.13).

what i found is I can't in my destination selection use a negative address range (I think this would be a good idea - thought I would float here before talking to the SE).

my other alternative is 

going out internet interface from src group "inside ip address" and destination "is nat only dst"nat to a.b.c.13

going out internet interface from src group "out via non prod" nat to a.b.c.113

going out internet interface from src group "inside ip address" nat to a.b.c.13

but I am not sure how it would having 2 active pools on the same address is that allowed, i am guessing it is cause i actually have

bound to node 0 on active active

going out internet interface from src group "out via non prod" nat to a.b.c.113

going out internet interface from src group "inside ip address" nat to a.b.c.13

bound to node 1 on active active

going out internet interface from src group "out via non prod" nat to a.b.c.113

going out internet interface from src group "inside ip address" nat to a.b.c.13

so if node 1 or node 0 fails there would be 2 sete of active pools on the same node ?

[Alex_Samad]

Thought I would give it a try

Default Outbound NAT DST - 0 Dynamic IP/Port 325 257723 36472 4
Default Outbound NAT DST - 1 Dynamic IP/Port 325 257723 36472 4
Default Outbound Non Prod - 0 Dynamic IP/Port 0 258048 36472 4
Default Outbound Non Prod - 1 Dynamic IP/Port 0 258048 36472 4
Default Outbound - 0 Dynamic IP/Port 325 257723 36472 4
Default Outbound - 1 Dynamic IP/Port 325 257723 36472 4

seems like it groups all the same ip address together you can see the top 2 and the bottom 2 match the same port count use

thats good