For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ian_bucknor_152's avatar
ian_bucknor_152
Icon for Nimbostratus rankNimbostratus
May 07, 2014

I need an irule for a "VIP that forwards ANY to a pool that is going to a default gateway".

I need an irule for a "VIP that forwards ANY to a pool that is going to a default gateway". The iRule will intercept traffic going to the default gateway if it matches the specified match. The exampl...
application delivery
devops
iRules
LTM
management
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
May 07, 2014

Ah, OK. So the rule looks like this - note I've changed the second if to an elseif;

when CLIENT_ACCEPTED {
 log local0. "[IP::remote_addr]:[TCP::remote_port] > [IP::local_addr]:[TCP::local_port]"

 if { [IP::addr [IP::client_addr] equals 192.168.192.39] } {
  snat 192.168.186.46
  log local0. "192.168.192.39 HIT, snatting to 192.168.186.46"
  pool gate186tunnel } 

 elseif { [IP::addr [IP::client_addr] equals 192.168.192.45] } { 
  snat 192.168.186.47
  pool gate186tunnel }
}

So, it looks fine to me. As it's a FastL4 virtual CLIENT_ACCEPTED should fire when the first packet arrives. Are you sure the pool has that name, in that exact case? Do you see the log messages?