Forum Discussion

Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
May 09, 2013

F5 as NAT device

HI All,   we have a deployment where F5 will be use as NAT device to replace a router. Im thinking what is the best practice for this, use route domain of just use vlan?     Thanks!   ...
security
Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
May 10, 2013
Hi Steve,

 

 

Im having an issue with my NAT, i have here, i can't initiate traffic to the NAT address..did i missed something?

 

ip nat inside source static 10.157.8.84 172.26.210.84

 

ip nat outside source static 10.103.33.11 10.171.14.111

 

 

vlan 10 - inside

 

vlan 20 - outside

 

 

ltm nat /Common/172.26.210.84 {

 

inherited-traffic-group true

 

originating-address 10.157.8.84

 

traffic-group /Common/traffic-group-1

 

translation-address 172.26.210.84

 

}

 

ltm nat /Common/10.171.14.111 {

 

inherited-traffic-group true

 

originating-address 10.103.33.11

 

traffic-group /Common/traffic-group-1

 

translation-address 10.171.14.111

 

}