Forum Discussion
agriesser
Nimbostratus
NimbostratusAccess loadbalanced IP from internal VLAN
Hi again,
I'm not sure if my current problems are related to the changes outlined here:
https://devcentral.f5.com/questions/nat-exemption-next-hop-routing
But it might well be. I'm cur...
So by removing any SNAT, it looks like the return traffic from your servers isn't going back through the BIG-IP for this 192.168.1.0/24 vlan since they are in the same subnet.
One way to fix this is to apply an iRule to your 1.1.1.1 virtual server that will SNAT only if the request is from your internal vlan:
when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals 192.168.1.0/24] }{ snat automap } }
Cory_50405
Noctilucent
NoctilucentSo by removing any SNAT, it looks like the return traffic from your servers isn't going back through the BIG-IP for this 192.168.1.0/24 vlan since they are in the same subnet.
One way to fix this is to apply an iRule to your 1.1.1.1 virtual server that will SNAT only if the request is from your internal vlan:
when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals 192.168.1.0/24] }{
snat automap
}
}
agriesserThis works perfect - many thanks!
Little_Xian_131does the gateway of internal Vlan pool member like 192.168.1.1:80 is BIG-IP's interface IP?