For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SW_159148's avatar
SW_159148
Icon for Nimbostratus rankNimbostratus
Aug 08, 2014

How to mirror SNAT when using an iRUle with "snat automap"

I have configured the following iRule which will SNAT only when the source and destination subnet are the same. It works fine, but I can't figure out how to enable connection mirroring on a SNAT when it is called out in an iRule.

 

when LB_SELECTED { if {[IP::addr "[IP::client_addr]/24" equals "[LB::server addr]/24"]} { snat automap }}

 

Thanks.

 

application delivery
design
devops
iRules
LTM

2 Replies

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Aug 09, 2014

    Hi SW,

     

    Are you talking about connection mirroring on the VIP and having it on/off based on an iRule?

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Aug 10, 2014

    but I can't figure out how to enable connection mirroring on a SNAT when it is called out in an iRule.

     

    i understand you just need to enable connection mirroring for virtual server (since snat is applied to traffic for virtual server).

     

    connection mirroring for snat in sol13478 could be applied to snat list configuration.

     

    sol13478: Overview of connection and persistence mirroring (11.x)

     

    http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13478.html