Configuring a SNAT for internal hosts to route to the rest of the external network...

Hi JB,

 

 

if you just need a straight SNAT (not on a Virtual Server), you're effectively creating a SNAT listening on a VLAN, so the basic steps would be:

 

 

1) Local Traffic>Snats>SNAT List>Create...

 

2) Give it a name, and for testing purposes set 'translation' to Automap, which will ensure the outbound traffic gets SNATed to the egress VLANs self ip(floating preferentially, if there is one), to ensure traffic can route back correctly

 

3) Origin: is basically 'who is allowed to use the SNAT?' - this is either going to be 'All Addresses' (meaning anyone who hits the SNAT) or "Address list" and then a defines range of IP's and/or subnets that can use the SNAT.

 

4) VLAN Traffic is very important, select to 'Enable On....' then select only the VLANs on which it needs to listen (e.g. your internal VLAN).

 

 

 

That's pretty much it, let us know how you get on!

 

 

 

If you have ask f5 access, there's a pretty good rundown of SNAT features here:

 

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/LTM_config_guide_943/ltm_snat.html

 

 

Chris