Forum Discussion
Bypass catchall SNAT?
We have a default catchall SNAT for internet destined traffic, however I'm trying to get the F5 to route traffic internally to a private network without SNATing. I created a forwarding virtualserver without SNAT and pointed it the the gw. However, the F5 SNAT's the source ip before forwarding on to the gw. I've tried the following iRule without luck:
when CLIENT_ACCEPTED {
if { [IP::addr [IP::local_addr] equals 10.1.1.0/255.255.0.0] }{
snat none
}
}
Any assistance in making the F5 just route the traffic without SNATing would be helpful.
Thanks.
2 Replies
- The iRule above actually does work. I left a continuous ping running an assumed that the changes would occur immediately. Apparently I had to stop my continuous ping for the iRule to kick in.
- Yeah, I'd expect the rule to take precedence over the SNAT. With a wildcard forwarding virtual server you should be able to add an else clause with 'snat automap' and then remove the default SNAT.
when CLIENT_ACCEPTED { if { [IP::addr [IP::local_addr] equals 10.1.1.0/24] }{ snat none } else { snat automap }}
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com