For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DevBabu_124276's avatar
DevBabu_124276
Icon for Nimbostratus rankNimbostratus
Aug 10, 2016

Global SNAT List and Virtual Server

I have a Virtual Server with Source Address Translation set to None. Have a SNAT List with origin IP address for all IPv6 and IPv6.

 

I have noticed that although the Virtual Server does not have Source Address Translation enabled, the client IPs hitting that vip get translated to the IP address specified in the SNAT List.

 

Is this by design ? How can I fix this without removing the SNAT list. (I am thinking of disabling SNAT at pool level)

 

Any help is appreciated.

 

Thanks

 

application delivery
LTM
TMSH

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Aug 10, 2016

    This is by design, see Sol9038 and sol9039. A snat pool on a VS would take precedence over the snat list. To remove snat altogether then you may have to re-evaluate your snat list config.

     

    N

     

  • Subrun's avatar
    Subrun
    Icon for Cirrostratus rankCirrostratus
    Apr 02, 2020

    Can You advise what is Global SNAT List ? From F5 Config where should I see this Global SNAT List ?

  • Lidev's avatar
    Lidev
    Icon for Nacreous rankNacreous
    Apr 02, 2020

    Hello Subrun,

     

    I think they are talking about that when they talk about Global SNAT List