For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kannankris_1363's avatar
kannankris_1363
Icon for Nimbostratus rankNimbostratus
Oct 24, 2013

Forward Proxy Setup is Taking Precedence Over NAT

Hi All,   I need a help from you guys(F5 Guru's) on one of the issue which I have being working for long time(may be 5 months).   In my environment we are using Performance layer 4 VS(Forward P...
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 25, 2013

Ah. Thanks for that, it's clear now. So, SNAT will always take precedence over NAT in this scenario. You have a few options but I'd suggest an iRule would be best, along with a second SNAT Pool with IP 1.1.1.1. The rule would look like this;

when CLIENT_ACCEPTED {
 if { [IP::addr [IP::client_addr] equals 10.2.1.24] } {
  Select alternative SNAT Pool if this is 10.2.1.24
  snatpool 'name' }
  All other hosts will use the SNAT Pool assigned to the VS (1.1.1.2)
}