Forum Discussion
How to perform NAT only when Server is acessing it VS
Hi,
I have a need to configure a Big-IP LTM in order that the real servers can also contact its Virtual Server, but have its IP NATed for this comunnication. This Servers also need to contact other Servers and have to cross the F5 for this comunication without having the IP NATed in this case.
How can we configure this conditional NAT?
Regards
- Ed_Summers
Nimbostratus
Since you don't want to SNAT the servers when they're accessing other objects through the BIG-IP, one solution would be to apply an iRule to your Virtual Server that performs the SNAT. The below assumes you have created a data group called 'the_servers' that contains IP addresses of the servers to which you wish to apply SNAT. Create and populate the data group, create the iRule, and apply the iRule to your VS.
when CLIENT_ACCEPTED { if { [class match [IP::client_addr] equals the_servers] } { snat automap } }
I used automap as an example, but if you have a specific SNAT address you can use that as well.
References:
Snatpool article - in case you need a snatpool instead of SNAT
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com