The iptables rules that was applied on the GW to get this working was :
iptables -t filter -A FORWARD -i bond0 -o tap0 -j ACCEPT iptables -t filter -A FORWARD -i tap0 -o bond0 -j ACCEPT
The pvt customer facing subnet was on the bond0 and the cloud facing subnet on tap0.
The iptables rules that was applied on the GW to get this working was :
iptables -t filter -A FORWARD -i bond0 -o tap0 -j ACCEPT
iptables -t filter -A FORWARD -i tap0 -o bond0 -j ACCEPT
The pvt customer facing subnet was on the bond0 and the cloud facing subnet on tap0.