Forum Discussion
DanielHadush
Nimbostratus
NimbostratusF5 LTM Virtual Server IP NAT Configuration
If from firewall side needs to do NAT Server Mapping between My Virtual Server IP and One public IP and the connection is outbound only , will i give Virtual Server IP or F5 Self-IP to security Team to do the NAT Mapping.
From My Understanding i should give them self-Ip since Since F5 will change the source Ip to Self-Ip when going out.
3 Replies
- Mayur_Sutare
MVP
Hi DanielHadush Where is your firewall seating? Can you share some more context to understand it properly ?
DanielHadushHello Mayur_Sutare it is after the F5 like F5 --- DMZ Switch --- Internet Firewall --- Router -- Internet
- zamroni777
vserver sends and receives packets using it's configured vip, not self ip.
you should not nat self ip to public ip because self ip can be used to access control plane
