For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chrisphysics_11's avatar
chrisphysics_11
Icon for Nimbostratus rankNimbostratus
Jan 02, 2013

How to - not use NAT for a single host behind an F5 when not using a VIP.

I have an F5 which is using a SNAT list to automap all addresses on my inbound VLAN. (call this the outside)   I believe this is used for outbound connections from internal hosts to present a rout...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 02, 2013
However for inbound connections direct to my hosts (ie not via virtual server) I'm not sure if this applies or not.if snat list is applied on incoming vlan, yes it is. anyway, why don't you use snatpool setting under virtual server configuration instead of snat list? so, i will affect inbound traffic to virtual server only.

 

 

I want my server to see the real client IP, I have a feeling what I need to do is build an IP forwarding rule for the host and ensure SNAT pool is set to none.you mean ip forwarding virutla server, don't you? if so, yes but you have to also remove snat list configuration. snat list will apply even snat is set to none under ip forwarding virtual server.

 

 

hope this helps.