Forum Discussion
Matt_H
Nimbostratus
Nov 27, 2006Don't use automap when VIP forwarding
I'm trying to get certain IP addresses (clients) to not utilize any kind of snat (including automap) when utilizing a forwarding virtual server. Here's the iRule I thought would have worked.
...
hoolio
Cirrostratus
Nov 28, 2006That rule looks like it should work to disable SNAT for the specific IP addresses. I'm not sure whether you need to specify to forward if it's already attached to a FastL4 virtual server.
Are client connections being reset, timing out, or completing; but with the source address translated?
If you wanted, you could create a datagroup (class), with your source IP addresses:
class no_snat_addresses {
network 10.10.10.0 netmask 255.255.255.0
host 10.11.0.10
}
when CLIENT_ACCEPTED {
if { [matchclass [IP::remote_addr] equals $::no_snat_addresses] }{
snat none
}
}
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects