For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lapsio's avatar
Lapsio
Icon for Altostratus rankAltostratus
Dec 16, 2018

How to configure source NAT for health monitors?

I have following deployment scenario:   dmz firewall --- F5-BIGIP --- internal firewall/router --- servers   F5 acts as gateway and uses 192.168.0.0/24 subnet on VLAN facing internal firewall. ...
application delivery
BIG-IP
LTM
outbound-snat
security
source nat
DaveS_377638's avatar
DaveS_377638
Icon for Cirrus rankCirrus
Dec 16, 2018

The source address is the self address based on the routing to the back end servers. Something similar has been asked before and the solution suggested was to use an external monitor running a script or command that allows a custom source address. The latest I found was here:

 

External Monitor- DevCentral Wiki

 

Alternately, you could use inband passive monitoring which looks at the client connections but would depend on what exactly you need to monitor.