For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MarkMackie_5812's avatar
MarkMackie_5812
Icon for Nimbostratus rankNimbostratus
Feb 27, 2012

changing outgiong SNAT based on Requesting IP

Right now I have the following:     Any UDP 500 requests get snatted to let say 10.10.12.1 (public ip) so any UDP 500 traffic goes out as an IP i want the request to come back on.       ...
application delivery
dev
devops
iRules
naladar_65658's avatar
naladar_65658
Icon for Altostratus rankAltostratus
Feb 27, 2012
Hoolio answered a similar post on iRules and SNAT'ing, perhaps it will get you going in the right direction:

 

 

https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/61990/showtab/groupforums/Default.aspx

 

 

when CLIENT_ACCEPTED {

 

 

Check if client is in 192.168.1.0/24 subnet

 

if {[IP::addr [IP::client_addr] equals 192.168.1.0/24]}{

 

 

Use the snatpool

 

snatpool snatpool_11.11.11.1

 

}

 

}