Forum Discussion
J_Peterman_4266
Nimbostratus
NimbostratusHaving trouble with destination based SNAT irule
We are looking to implement destination based SNAT via iRule where all traffic destined to RFC 1918 space does not get SNAT outbound and it retains its private addressing, all other traffic destined t...
J_Peterman_4266Nimbostratus
NimbostratusThe change to local_addr from remote_addr doesn't make any difference. It is still natting everything outbound regardless of the destination address.
when CLIENT_ACCEPTED {
Check if the remote address is part of the private_nosnat data group
if { [class match [IP::local_addr] equals private_nosnat]} {
don't do anything
log local0. "MATCH NO SNAT CLASS"
snat none
} else {
snat behind this address
snat 1.1.1.1
}
}