Forum Discussion

darrenfoo_19996's avatar
darrenfoo_19996
Icon for Nimbostratus rankNimbostratus
Jul 14, 2011

Bypass catchall SNAT?

Hi,     We have a default catchall SNAT for internet destined traffic, however I'm trying to get the F5 to route traffic internally to a private network without SNATing. I created a forwarding v...
basic
getting started
new to f5
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 15, 2011
Yeah, I'd expect the rule to take precedence over the SNAT. With a wildcard forwarding virtual server you should be able to add an else clause with 'snat automap' and then remove the default SNAT.

Also, you can optimize the IP::addr comparison by changing the format to:

when CLIENT_ACCEPTED {   if { [IP::addr [IP::local_addr] equals 10.1.1.0/24] }{      snat none   } else {      snat automap   }}

See Jason's article on this for complete details:

http://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086449/iRules-IP-Comparison-Considerations-with-IPaddr-Command.aspx

Aaron