For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BaltoStar_12467's avatar
BaltoStar_12467
Dec 27, 2013

BIG-IP : virtual-server configuration for snat

BIG-IP 11.4.0 Build 2384.0 Final   vip-external-01 is enabled for vlan-external-01 and routes to pool-01 whose members live on vlan-internal-01. vip-external-01 has snat auto-map enabled.   vi...
design
snat
snat automap
virtual server
vlan
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Dec 28, 2013

On vip-external-01 , is it also necessary to enable vlan-internal-01 ?

 

No. Only the ingress VLAN needs to be enabled.

 

And on vip-internal-01 , is it also necessary to enable vlan-external-01 ?

 

No. Same reason.

 

More generally speaking, how to configure a simple network to support browser-client request sent to vip and the routed to destination web-server with response following the reverse path back ?

 

The simplest answer is a VIP pointing to a pool and an applied SNAT. You can optionally enable/disable specific VLANs to limit ingress traffic, but it's not absolutely required. The SNAT guarantees return routing.