Forum Discussion

vadim's avatar
vadim
Icon for Nimbostratus rankNimbostratus
Aug 10, 2022

how to set sslvpn clients external ip same as address pool leased ip and not using bigip self ip

hi i am new to F5 and i am trying to setup sslvpn solution that seems to be very simple i am using aws marketplace ltm bigip ve instance single nic configuration, bigip selfip is of 172.16.0.0/16 network. now i have configured sslvpn to use address pool lease of 10.230.230.0/24 in pass all trffic via bigip mode so i am expecting access internet via bigip external ip (elastic ip) and access internal resources via 10.230.230.0/24 network but in my case all traffic getting out to internal resources via bigip self ip (172.16.0.0/16) and not via clients leased ip for example (10.230.230.2) is there a way to set sslvpn clients source ip as there leased ip?

cloud
security
  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Aug 10, 2022

    Set the SNAT Pool Setting in your Network Access List from AutoMap to None. Correct routing for the lease pool ip addresses must be configured with this setup.

    • vadim's avatar
      vadim
      Icon for Nimbostratus rankNimbostratus
      Aug 10, 2022

      snat pool configured to none

      routing configured on aws route table assosiated to bigip instance

      on bigip itself i configured default route 0.0.0.0 to aws vpc default gateway in my case 172.16.1.1

      this config works as expected, but i dont have insternet access when selecting Force all traffic through tunnel
      option. only internal resources availble