Forum Discussion
BIG-IP : virtual-server configuration for snat
BIG-IP 11.4.0 Build 2384.0 Final
vip-external-01 is enabled for vlan-external-01 and routes to pool-01 whose members live on vlan-internal-01. vip-external-01 has snat auto-map enabled.
vi...
Kevin_Stewart
Employee
EmployeeOn vip-external-01 , is it also necessary to enable vlan-internal-01 ?
No. Only the ingress VLAN needs to be enabled.
And on vip-internal-01 , is it also necessary to enable vlan-external-01 ?
No. Same reason.
More generally speaking, how to configure a simple network to support browser-client request sent to vip and the routed to destination web-server with response following the reverse path back ?
The simplest answer is a VIP pointing to a pool and an applied SNAT. You can optionally enable/disable specific VLANs to limit ingress traffic, but it's not absolutely required. The SNAT guarantees return routing.