Forum Discussion
Chris_Phillips
Nimbostratus
Nimbostratusapplying snat based on route out of local network
Howdy,
Our LTM's sit between our client networks and our server networks, switching all data on a vlan group to gain full visibility of all traffic. this is not an exact split though, and ob...
Chris_PhillipsNimbostratus
NimbostratusA bit more work and it's a bit better and more efficient (I think)
when LB_SELECTED {
server_networks is a data group / class defined elsewhere
start with zero score
set snat_score 0
increase score if client is on server network
if {[matchclass [IP::client_addr] equals $::server_networks]} {
incr snat_score
}
increase score if server is on server network
if {[matchclass [LB::server addr] equals $::server_networks]} {
incr snat_score
}
if score is not 1 then client and server are on
same side of LTM, so SNAT is required
if { $snat_score != 1 } {
snatpool my_snatpool
}
}