F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

WUM_113639's avatar
WUM_113639
Icon for Nimbostratus rankNimbostratus
Oct 23, 2014

ACE NAT to F5 NAT

Hi,

 

I am migrating ACE to F5 and I need some help in migrating the NATTing.

 

1st NAT

access-list NAT-ACL line 8 extended permit ip host 192.168.11.10 host 172.22.244.241 ! class-map match-any NAT-CLASS 2 match access-list NAT-ACL ! policy-map multi-match NAT-POLICY class NAT-CLASS nat static 172.22.245.24 netmask 255.255.255.255 vlan 43 ! interface vlan 11 service-policy input NAT-POLICY

 

2nd NAT

interface vlan 42 nat-pool 10 10.156.48.12 10.156.48.20 netmask 255.255.255.0 pat

 

I would really appreciate the help.

 

Thanks

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
security
TMOS
TMSH

1 Reply

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Nov 03, 2014

    I think it might be better to rephrase the question in F5 speak, or in English. NAT/SNAT/DNAT on an F5 is not directly portable from CSM/ACE modules in my experience, especially if we are talking switch modules that are bridging. There are -isms on both sides.

     

    What is the desired end state or requirement?