Hi,
Do these two code do the same?
What difference?
add action=masquerade chain=srcnat disabled=no src-address=192.168.99.0/24
add action=src-nat chain=srcnat disabled=no dst-address=0.0.0.0/0 src-address=192.168.99.0/24 to-addresses="my public IP"
‘src-nat’ always translates to the specified address. ‘masquerade’ dynamically translates to the preferred IP address configured on the out-interface.
For static IP interfaces it’s best practice to use ‘src-nat’. For dynamic IP interfaces it’s necessary to use ‘masquerade’.