For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_R__Barsti's avatar
David_R__Barsti
Icon for Nimbostratus rankNimbostratus
May 23, 2014

inbound snat question (ltm v11.4.0)

I'm new to snating so please be kind. Trying to figure out an inbound snat. I want a client say ip 1.2.3.4 to hit the bigip ltm at ip 2.3.4.5 and have the request sent to a server ip 3.4.5.6. Serv...
nitass's avatar
nitass
Icon for Employee rankEmployee
May 27, 2014

this is snat list example.

 config

root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual bar
ltm virtual bar {
    destination 172.28.24.10:80
    ip-protocol tcp
    mask 255.255.255.255
    pool foo
    profiles {
        fastL4 { }
    }
    source 0.0.0.0/0
    vs-index 32
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm pool foo
ltm pool foo {
    members {
        200.200.200.101:80 {
            address 200.200.200.101
        }
    }
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm snat snat-172.28.24.10
ltm snat snat-172.28.24.10 {
    origins {
        172.28.24.1/32 { }
    }
    translation /Common/172.28.24.10
}

 trace

[root@ve11a:Active:In Sync] config  tcpdump -nni 0.0 -s0 port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 65535 bytes
06:10:36.169966 IP 172.28.24.1.42607 > 172.28.24.10.80: S 2894379379:2894379379(0) win 5840  in slot1/tmm1 lis=
06:10:36.170015 IP 172.28.24.10.42607 > 200.200.200.101.80: S 2894379379:2894379379(0) win 5840  out slot1/tmm1 lis=/Common/bar