inteligent SNAT with iRule

Ok your suspicion was good

 

 

the space between the IP:addr command and IP::remote command has been missing.

 

But it's strange: I didn't get any failure when I applied the rule ...

 

===> Ok whatever

 

 

Now I have configured following rule

 

 

when CLIENT_ACCEPTED {

 

if {[IP::addr [IP::remote_addr] equals "2.2.2.0 mask 255.255.255.0"]}

 

{forward

 

} else {use snatpool test_snat}

 

}

 

 

good but the effect is ===>>> all traffic is forwarded with the SNAT address (and this happens with the destination is 2.2.2.x , too!)

 

I have the same result when I am using the rule as you mentioned in

 

your last posting:

 

-------------------------------------------------------------

 

when CLIENT_ACCEPTED {

 

if {not [IP::addr [IP::remote_addr] equals "2.2.2.0 mask 255.255.255.0"]} {

 

use snatpool test_snat

 

}

 

forward

 

}

 

-------------------------------------------------------------

 

Here again: when using the 2.2.2.x as a destination the box is still using the snatpool ??

 

 

--------------------------------------------

 

Virtuall Server config:

 

The vituall Server 0.0.0.0:0 is configured for all VLAN and in IP Forwarding modus

 

and in the recources is the "mysnat" rule attched

 

--------------------------------------------

 

SNAT:

 

in the "SNAT Pool List" is the pool named "test_snat"

 

--------------------------------------------

 

 

It seems to be as the destination address (-> remote_addr) ist not

 

interesting in the rule???

 

 

regards