F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Shay_Ben-David1's avatar
Shay_Ben-David1
Icon for Nimbostratus rankNimbostratus
Feb 19, 2007

access VIP from internal VLAN on the bigip with SNAT

Hi, i have bigip in a routed topology with two vlan interfaces (external to internet, and internal to LAN), only way to go from my internal vlan to the VIPs is with SNAT on the VIP with Auto Map confi...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 19, 2007
You could use a past example to apply a SNAT only when the client IP address is on the same /24 subnet as the server.

Click here


when LB_SELECTED {  
  if {[IP::addr "[IP::client_addr]/24" equals "[LB::server addr]/24"]} {  
  snat automap 
  }
}

IP::client_addr is resolved to the client IP address. The /24 gets just the first three octets of the IP address and does a comparison against the network of the server address. If they match, then the request is SNAT'd.

Aaron