Firewall-Generated Ruleset:

***
binat on cxl1 inet from 10.X.X.16 to any -> Y.Y.Y.132
***
binat on cxl1 inet from 10.X.X.16 to any -> Y.Y.Y.152
***

config.xml:


Firewall-pf NAT Rules:
***
@9 rdr on cxl0 inet from any to Y.Y.Y.132 -> 10.X.X.16 bitmask
@10 rdr on l2tp inet from any to Y.Y.Y.132 -> 10.X.X.16 bitmask
@11 rdr on openvpn inet from any to Y.Y.Y.132 -> 10.X.X.16 bitmask
@1 binat on cxl1 inet from 10.X.X.16 to any -> Y.Y.Y.132
***
@54 rdr on cxl0 inet from any to Y.Y.Y.152 -> 10.X.X.16 bitmask
@55 rdr on l2tp inet from any to Y.Y.Y.152 -> 10.X.X.16 bitmask
@56 rdr on openvpn inet from any to Y.Y.Y.152 -> 10.X.X.16 bitmask
***