For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

csdillon_18199's avatar
csdillon_18199
Icon for Nimbostratus rankNimbostratus
Oct 11, 2007

Bypassing default SNAT

I am looking for a way for the BigIP LTM to bypass my default SNAT rule when heading to a certain destination network. Please let me know.
config
design

1 Reply

  • csdillon_18199's avatar
    csdillon_18199
    Icon for Nimbostratus rankNimbostratus
    Oct 17, 2007
    Thank you for your reply. I wasn't sure which forum it should go into so thanks for the assistance.

     

     

    So would the following work?

     

     

    when CLIENT_ACCEPTED {if { [IP::addr [IP::remote_addr] equals 10.1.1.0 mask 255.255.255.0] } {

     

    forward

     

    } else {

     

    snat 1.2.3.4 }

     

    }

     

     

     

    I am trying not to SNAT when going to a particular network (10.1.1.0/24 for example)