For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Jun 13, 2011

BigIP Remove the source address of host

Hi,

 

 

I have problem with F5 BigIp, i have created vip ip address (192.168.1.3) for two nodes (192.168.1.1 and 192.168.1.2)

 

 

 

any client ( example 10.1.1.1) access the virtual ip (192.168.1.3) will be shown at the servers as ip address of BigIp not the client address( 10.1.1.1), how can i let the BigIP show the ip address of host instead of ip address of self ip.

 

 

i have attached one photo for clarification

 

 

 

 

thanks BigIP expert :):):)

 

 

26 Replies

  • so what do suggest ?

     

     

    is there any way i can do it with out changing default gateway ?

     

     

    i have looked at this article

     

    http://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html

     

     

    what do u think, should i try it ?
  • >so what do suggest ?

     

     

    i guess pool member still responds to catalyst.

     

     

    >is there any way i can do it with out changing default gateway ?

     

    >i have looked at this article

     

    >http://support.f5.com/kb/en-us/solutions/public/4000/800/sol4816.html

     

    >what do u think, should i try it ?

     

     

    if traffic is http, x-forwarded-for is applicable. so, u don't need to change pool member's default gateway and virtual server can have snat automap setting. anyway, u know, u've to modify server logging to pick up client ip address from x-forwarded-for http header.
  • yes, on bigip. i never modified logging on server-side. anyway, your server team should know since x-forwarded-for is not a new thing. :-)
  • hhhhhhhhhhhhhhh, i think they know

     

    i will check with them, if i need any help i will return back to u :):):):)

     

    thanks for all yr help
  • Hi have you resolved this issue? I also want to try this one without changing the default gateway of the server which is the core switch. Is there any way example in irule? Thanks!