Forum Discussion
AFM: Matching order between AFM rule and NAT
Hi,
I have a question on AFM and matching order process between AFM Fw rule and LTM NAT.
When I create a new rule, which IP should I use ? Origin or translated IP ?
Best regards
4 Replies
- Thomas_Gobet
Nimbostratus
Hi,
Which NAT are you talking about ? If it's SNAT applied on a VS, you don't need to know it when you're on AFM.
SNAT is applied when the packet is leaving out your BIG-IP.
- brahim94_11525
Nimbostratus
Hi,
Thank you for the feedback,
OK so for the SNAT when I create rule, I have to use the origin IP. Is it the same thing for destination NAT (create via LTM -> NAT List + Create) ?
Best regards,
- Thomas_Gobet
Nimbostratus
It's the same for the NAT List, you have to use the "original" destination IP.
But be careful, it will be under Global level. - brahim94_11525
Nimbostratus
OK, we are agree.
Thanks a lot
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com