For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Sep 13, 2018

Inside Server Internet Access through F5

Hi,   I have a requirement to allow internet/outside access to one of our internal server. I am following below steps. Please correct me if i am missing anything.   Server IP Needs Outside/Inte...
BIG-IP
cloud
LTM
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 13, 2018

Hi,

  • First of you have to set the default GW of your internal server to F5 (Int Interface, Floating if it's a cluster or self if it's a standalone)

  • create a VS (Forwarding (IP)) with 0.0.0.0:*

in your vs set:

translate-address disabled
translate-port disabled
  • If necessary, you can also configure a secure network address translation (SNAT) pool or enable SNAT automap to translate the source address. You may have to do this when forwarding traffic from RFC1918-addressed hosts over publicly routable networks.

So you have to set snat automap in order to avoir asymetric routing and retrieve ext ip.

More, you don't need to set a pool, IP forwarding FW the traffic to the destination IP address that is specified in the request rather than load balancing the traffic to a pool.

for more information:

https://support.f5.com/csp/article/K7595

Let me know if you need more details.

Just for information you have auther possibility to do it, example with a standard vs and pool...

Regards,