Forum Discussion

Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
May 09, 2013

F5 as NAT device

HI All,   we have a deployment where F5 will be use as NAT device to replace a router. Im thinking what is the best practice for this, use route domain of just use vlan?     Thanks!   ...
security
Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
May 09, 2013
Hi Steve,

 

 

The reason why we need to NAT IP addresses because of the conflicting IPs, we are currently replacing a Cisco router using an F5.

 

Here some snapshots from NAT Router:

 

 

ip nat pool SUN1 172.26.0.2 172.26.31.254 netmask 255.255.224.0

 

ip nat inside source list 11 pool SUN1

 

access-list 11 permit 10.19.0.0 0.0.31.255

 

ip nat inside source static 10.157.8.84 172.26.210.84

 

ip nat outside source static 10.103.33.11 10.171.14.111

 

 

 

 

Here's the flow

 

 

 

Company A <> Router Company A <> F5 <> Router Compny B <> Company B

 

 

Thanks!

 

Ferdz