For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_R__Barsti's avatar
David_R__Barsti
Icon for Nimbostratus rankNimbostratus
May 23, 2014

inbound snat question (ltm v11.4.0)

I'm new to snating so please be kind. Trying to figure out an inbound snat. I want a client say ip 1.2.3.4 to hit the bigip ltm at ip 2.3.4.5 and have the request sent to a server ip 3.4.5.6. Serv...
nitass's avatar
nitass
Icon for Employee rankEmployee
May 27, 2014

client is 172.28.24.1

virtual server is 172.28.24.10

snat is 172.28.24.10

server is 200.200.200.101

this configuration will translate source 172.28.24.1 to 172.28.24.10 when sending to destination 200.200.200.101

 config

root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual bar
ltm virtual bar {
    destination 172.28.24.10:80
    ip-protocol tcp
    mask 255.255.255.255
    pool foo
    profiles {
        tcp { }
    }
    source 0.0.0.0/0
    source-address-translation {
        pool snat-172.28.24.10
        type snat
    }
    vs-index 32
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm pool foo
ltm pool foo {
    members {
        200.200.200.101:80 {
            address 200.200.200.101
        }
    }
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm snatpool snat-172.28.24.10
ltm snatpool snat-172.28.24.10 {
    members {
        172.28.24.10
    }
}

 trace

[root@ve11a:Active:In Sync] config  tcpdump -nni 0.0 -s0 port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 65535 bytes
06:07:25.877058 IP 172.28.24.1.42606 > 172.28.24.10.80: S 1103785526:1103785526(0) win 5840  in slot1/tmm0 lis=
06:07:25.877207 IP 172.28.24.10.42606 > 200.200.200.101.80: S 1103785526:1103785526(0) win 5840  out slot1/tmm0 lis=/Common/bar