For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
Alexey_384's avatar
Alexey_384
Historic F5 Account
Jun 04, 2014

Original IP is saved on BIG-IP in logs. Also you may create iRule to manipulate with src IP (save in special file or similar) But if you wish using None for Snat, and your clients are from another subnet, then the backend servers will use the default GW for responses, and you have to configure default GW to redirect responses to BIG-IP, or use BIG-IP as GW (btw, you may use BIG-IP as firewall too with the AFM module).