Forum Discussion

LillyM_9417's avatar
LillyM_9417
Icon for Altostratus rankAltostratus
Apr 27, 2011

avoid changing source port of the connection while using SNAT

Hello,     We are using SNAT in the irule. Lets assume client's Ip address 192.1.1.1 and port 9999, after the SNAT operations   we manage to change the clients IP address to spesific ip add...
config
design
LillyM_9417's avatar
LillyM_9417
Icon for Altostratus rankAltostratus
Apr 28, 2011
Hello,

 

 

Our version is 10.2, I changed source port to preserve and also preserve strict and tried again. and nothing works.

 

 

My irule is:

 

 

=================

 

 

timing on

 

 

when RULE_INIT {

 

set static::xdebugsubdev 0

 

}

 

 

when CLIENT_ACCEPTED {

 

TCP::collect 8

 

if { [IP::addr [IP::client_addr] equals 192.0.0.0/8 ] } {

 

set caddr "[IP::client_addr]"

 

scan $caddr %d.%d.%d.%d ya yb yc yd

 

snat 292.$yb.$yc.$yd

 

}

 

 

}

 

 

 

=================