SDN SNAT not working with cluster firewall enabled

[najimurad]

Hi all! I've been playing around with EVPN SDNs. I have SNAT enabled on some Vnets. After some ping tests on containers, 8.8.8.8 is unreachable only once enabling the datacenter firewall. All outbound traffic is accepted by default, not sure if EVPNs require inbound rules to the hosts in order for SNAT to function. I've tried allowing all inbound traffic from the Vnet's subnets, but this didn't work. Also tried explicitly allowing outbound traffic from those subnets, no luck either. Any idea how I could get this working? Thanks in advance!!

 

[tomatoschewps]

Hi @najimurad,
Have you resolved this issue ?
I'm in the same situation, If I disable DC firewall my CT can ping outside, if I enable it, no ping.
I've tried to create an ACCEPT ALL IN rule but same problem ...