Forum Discussion

agriesser's avatar
agriesser
Icon for Nimbostratus rankNimbostratus
Apr 08, 2014

Access loadbalanced IP from internal VLAN

Hi again,   I'm not sure if my current problems are related to the changes outlined here:   https://devcentral.f5.com/questions/nat-exemption-next-hop-routing   But it might well be. I'm cur...
application delivery
LTM
network
snat
uturn
  • Cory_50405's avatar
    Cory_50405
    Apr 08, 2014

    So by removing any SNAT, it looks like the return traffic from your servers isn't going back through the BIG-IP for this 192.168.1.0/24 vlan since they are in the same subnet.

    One way to fix this is to apply an iRule to your 1.1.1.1 virtual server that will SNAT only if the request is from your internal vlan:

    when CLIENT_ACCEPTED {
   if { [IP::addr [IP::client_addr] equals 192.168.1.0/24] }{
      snat automap
   }
}
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent

So by removing any SNAT, it looks like the return traffic from your servers isn't going back through the BIG-IP for this 192.168.1.0/24 vlan since they are in the same subnet.

One way to fix this is to apply an iRule to your 1.1.1.1 virtual server that will SNAT only if the request is from your internal vlan:

when CLIENT_ACCEPTED {
   if { [IP::addr [IP::client_addr] equals 192.168.1.0/24] }{
      snat automap
   }
}
Little_Xian_131's avatar
Little_Xian_131
Icon for Nimbostratus rankNimbostratus
Apr 09, 2014
does the gateway of internal Vlan pool member like 192.168.1.1:80 is BIG-IP's interface IP?