Forum Discussion
J_Peterman_4266
Nimbostratus
NimbostratusHaving trouble with destination based SNAT irule
We are looking to implement destination based SNAT via iRule where all traffic destined to RFC 1918 space does not get SNAT outbound and it retains its private addressing, all other traffic destined t...
Brian_Van_StoneNimbostratus
NimbostratusDoesn't help with the general case that much but I think this can solve this specific problem.
when CLIENT_ACCEPTED {
set local [IP::local_addr]
switch -glob $local {
10.* {
log local0. "MATCH NO SNAT CLASS"
snat none
}
172.1[6-9].* -
172.2[0-9].* -
172.3[0-1].* {
log local0. "MATCH NO SNAT CLASS"
snat none
}
192.168.* {
log local0. "MATCH NO SNAT CLASS"
snat none
}
default {
log local0. "MATCH AND SNAT"
snat 1.1.1.1
}
}
}
Not ideal, I agree, but hopefully the route domain handling with classes will get fixed soon.