For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Jan 28, 2009

Adding a LTM in DMZ

Hi All,     I have a DMZ connected to our firewall and it has the subnet x.x.224.0/22. This DMZ already has SMTP servers, external DNS servers, some web servers etc. Now, they want to add a...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Feb 05, 2009
No, you just need to SNAT. You can either use SNAT Automap to use the BIG-IP's self-ip or turn up a new IP in a SNAT Pool and use that (under Advanced on the virtual server - or you can just SNAT globally). L2 Forwarding would allow you to preserve client IP in the server logs, but it adds a whole host of other complications, spanning tree in particular.

 

 

Denny