Forum Discussion

krishans_52349's avatar
krishans_52349
Icon for Nimbostratus rankNimbostratus
Jan 25, 2011

Configure syslog server in F5 with an irule to see actual internet IP in syslog server

Hi,

 

 

we are using Big IP 3900 version 10.2 , We had network topolgy in this way that we need to enable SNAT as AutoMap , For this reason we are not been able to see the actual Internet IP / Client IP , in the servers .

 

 

We want configure an irule in such a way that it will log the actual Internet/Client IP and send it to the syslog server . For that should we need to configure syslog server in F5 , or it can be configured or forward through irule itself.

 

 

 

Our mail Aim is to see only the Actual Internet/Client IP.

 

 

Please help

 

 

Thanks in Advance for the help
application delivery
dev
devops
iRules
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jan 27, 2011
    The log statement actually uses the same HSL exit point on the LTM if you supply an IP address post 10.1, so log and HSL should be equally efficient, last I checked.

     

     

    Thanks for the info, Colin. That's useful to know. So does TMM then handle the HSL open behind the scenes for 'log < ip > $message' format?

     

     

    Aaron
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Jan 27, 2011
    @Aaron : Yes, effectively. It's not really an HSL open per se, it's just the handle that an HSL open would give you. There's effectively a high-speed exit point built in and HSL can make use of it, as can the log command.

     

     

    Colin