Forum Discussion
Tiger86_92132
Nimbostratus
NimbostratusA simple load balancing network
Hi,
I'm using BIG-IP 1600 with LC module. I need to config a simple load balancing network (just need outbound load balance), here's my network:
- I have 2 VLAN external for 2 internet lines, with 2 modems connect PPPOE to the Internet (use NAT on modems) (192.168.101.0/24 and 192.168.102.0/24)
- and 1 VLAN internal for clients (10.8.23.0/24)
I followed the configuration guide:
- create VLANs
- config self IPs for all VLAN
- define 2 Links for internet lines
- create Pool named default_gateway_pool that include 2 LAN IPs of the modems
- define a wildcard virtual server with default_gateway_pool
- create default route: using Pool default_gateway_pool
From F5, I can ping clients, LAN IPs of routers and ping to the Internet but from client, I can ping only the self IP of internal VLAN. I use self IP of internal VLAN for gateway for clients, is it rights ?
Could anyone tell me what step I missed ?
Many thanks
30 Replies
Cspillane_18296Hello,
did you turn off address and port translation for the outbound Virtual Server? Also ensure it is enabled only on the internal VLAN (where the clients are).
You should also enable SNAT on the Virtual Server (just use SNAT Automap for now).
If you have a floating internal IP address, use that rather than a static one (to allow for failover situations, assuming you have a HA pair).
Let us know how you get on.
Chris- nitass
Employee
i agree with chris. i think u've to use snat automap on the wildcard virtual server. otherwise, u need static route to 10.8.23.0/24 on the internet gateway.
additionally, tcpdump should show what wrong is.
tcpdump -nni 0.0 icmp
cheer! 
Tiger86_92132Thank you for your supports. I enable SNAT on the wildcard virtual server and use SNAT on the internal VLAN, then it works.- Tiger86_92132By the way, I can not ping any host on the Internet from clients although clients can connect to the Internet. Did I still miss something ?
- nitasshave u enabled Snat.AnyIpProtocol db variable? it is in preference setting page.
Snat.AnyIpProtocol = enable 
Minn_62043Cirrostratus
You can also check your Protocol in virtual server's settings page. By default, it is "TCP" only.- Tiger86_92132thank nitass. everything's just fine when I enable that variable.
- nitassu r welcome. :-)
- Tiger86_92132Now, I need to NAT some internal IPs to the Internet. I don't know exactly what i have to do, can I use NAT & SNAT together ?
HamishCirrocumulus
Yes, that's no problem... Just select the options and go.
H
