Forum Discussion

agriesser's avatar
agriesser
Icon for Nimbostratus rankNimbostratus
Apr 08, 2014

Access loadbalanced IP from internal VLAN

Hi again,   I'm not sure if my current problems are related to the changes outlined here:   https://devcentral.f5.com/questions/nat-exemption-next-hop-routing   But it might well be. I'm cur...
  • Cory_50405's avatar
    Apr 08, 2014

    So by removing any SNAT, it looks like the return traffic from your servers isn't going back through the BIG-IP for this 192.168.1.0/24 vlan since they are in the same subnet.

    One way to fix this is to apply an iRule to your 1.1.1.1 virtual server that will SNAT only if the request is from your internal vlan:

    when CLIENT_ACCEPTED {
       if { [IP::addr [IP::client_addr] equals 192.168.1.0/24] }{
          snat automap
       }
    }