Access to internet - issue from internal VLAN with SNAT

Hi JB,

 

 

a couple of things:

 

 

1) set the SNAT to automap - once we get it working you can then use your own SNAT addresses (which will usually be IP's on the external VLAN, not of another device!)

 

2) Set the VLAN traffic to the internal VLAN ONLY

 

3) If you must use a virtual server for the outbound traffic it'll be a wildcard VS (0.0.0.0:*) to allow all traffic out. The pool will be the gateway(s) of the BigIP. You also need to turn off address and port translation of the VS in this configuration (to send traffic THROUGH rather than TO the gateway).

 

 

Hope this helps!

 

 

If you're still stuck, take a tcpdump!

 

 

Chris