vyos@VyOS# set nat source rule 5 description exclude_from_PAT # Exclude IPSec subnet from PAT
vyos@VyOS# set nat source rule 5 source address 192.168.2.0/24
vyos@VyOS# set nat source rule 5 destination address 192.168.1.0/24
vyos@VyOS# set nat source rule 5 outbound-interface eth0
vyos@VyOS# set nat source rule 5 exclude

vyos@VyOS# set nat source rule 10 description MyPAT
vyos@VyOS# set nat source rule 10 source address 192.168.4.0/24
vyos@VyOS# set nat source rule 10 outbound-interface eth0
vyos@VyOS# set nat source rule 10 translation address masquerade

vyos@VyOS# set nat source rule 15 description 'PAT_192.168.2.0/24' # allow memembers of 192.168.2.0 to go to Inet
vyos@VyOS# set nat source rule 15 outbound-interface 'eth0'
vyos@VyOS# set nat source rule 15 source address '192.168.2.0/24'
vyos@VyOS# set nat source rule 15 translation address 'masquerade'