For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Jun 30, 2016

AFM NAT vs LTM NAT

This feature seems to have creeped up somewhere in the 12.x release for AFM? Or maybe it's been there but I've never seen it...   https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/produc...
AFM
application delivery
LTM
security
bassam_gohar_26's avatar
bassam_gohar_26
Icon for Nimbostratus rankNimbostratus
Jul 24, 2017

hi peter,

 

so what is difference between the standalone CGNAT module and CGNAT module that integrated in the AFM NAT ?

 

Peter_Mills_697's avatar
Peter_Mills_697
Historic F5 Account
Jul 24, 2017

Nothing actually. The same code is used for both. It is repackaging exercise since AFM users prefer to use ACLs. It also reduces the number of virtual servers required since you can setup a wildcard VIP and use ACL rules to filter the traffic. AFM is also gradually leap frogging the CGNAT module in other respects e.g. by adding support for proxy ARP (both source and destination) and adding other forms of 1:1 static NAT.

 

dynamic-pat == CGNAT