Forum Discussion

Joel_106642's avatar
Joel_106642
Icon for Nimbostratus rankNimbostratus
Sep 15, 2008

Allow SNAT Allow NAT on load balance pool

Can someone explain exactly what these options do? I have my F5 setup with a Forwarding Virtual Server for routing between internal and external subnet. I have no NATs or SNATs configured. I am using an iRule to perform a SNAT automap for server bounceback purposes.
config
design
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 15, 2008
    It's slightly confusing... requests to the pool won't be SNAT'd automatically if SNAT is enabled on the pool. It's more that you can prevent a SNAT enabled on the VIP from being used for connections to a specific pool by disabling SNAT on the pool.

     

     

    The Config Guide has a bit of info on this:

     

     

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip9_3config/BIG_IP_LTM_9_3_Config_Guide-05-1.htmlwp1215931

     

     

    Allowing SNATs and NATs

     

     

    When configuring a pool, you can specifically disable any secure network address translations (SNATs) or network address translations (NATs) for any connections that use that pool. You do this by configuring the Allow SNAT and Allow NAT settings. By default, these settings are enabled. You can change this setting on an existing pool by displaying the Properties screen for that pool.

     

     

     

     

    To be honest, I don't use NATs so I'm not sure how a pool would coincide with a NAT. Anyone else have ideas on that one or clarification on the SNAT option for a pool?

     

     

    Aaron