For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_R__Barsti's avatar
David_R__Barsti
Icon for Nimbostratus rankNimbostratus
May 23, 2014

inbound snat question (ltm v11.4.0)

I'm new to snating so please be kind. Trying to figure out an inbound snat. I want a client say ip 1.2.3.4 to hit the bigip ltm at ip 2.3.4.5 and have the request sent to a server ip 3.4.5.6. Serv...
David_R__Barsti's avatar
David_R__Barsti
Icon for Nimbostratus rankNimbostratus
May 28, 2014

ltm virtual safewordprod-v2 { destination 129.74.5.169:radius ip-protocol udp mask 255.255.255.255 pool safewordprod-v2 profiles { udp { } } source 0.0.0.0/0 source-address-translation { pool snat-129.74.5.169 type snat } vs-index 2490 }

 

ltm pool safewordprod-v2 { members { 172.19.232.215:radius { address 172.19.232.215 } } }

 

Definitely getting closer. tcpdump now shows the attempt to go to the server.

 

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0:nnnp, link-type EN10MB (Ethernet), capture size 65535 bytes 10:13:51.071434 IP 129.74.249.147.51583 > 129.74.5.169.1812: RADIUS, Access Request (1), id: 0xe6 length: 66 in slot1/tmm1 lis= flowtype=0 flowid=0 peerid=0 conflags=0 inslot=3 inport=32 haunit=0 peerremote=00000000:00000000:00000000:00000000 peerlocal=00000000:00000000:00000000:00000000 remoteport=0 localport=0 proto=0 vlan=0 10:13:51.071454 IP 129.74.5.169.51583 > 172.19.232.215.1812: RADIUS, Access Request (1), id: 0xe6 length: 66 out slot1/tmm1 lis=/Common/safewordprod-v2 flowtype=128 flowid=570081DD9200 peerid=5700839D8400 conflags=4000124 inslot=3 inport=32 haunit=1 peerremote=00000000:00000000:0000FFFF:814AF993 peerlocal=00000000:00000000:0000FFFF:814A05A9 remoteport=51583 localport=1812 proto=17 vlan=132