Forum Discussion

mr_evil_116524's avatar
mr_evil_116524
Icon for Nimbostratus rankNimbostratus
Apr 17, 2013

Internal server cannot access internet

Hello All,

 

I am very very new to F5. I am trying to configure F5 verion 11.3.0 HF4 to access internet. How do I go about doing that? Right now my aim to allow all outbound traffic to through but not indound traffic.

 

I have tried few things i.e. SNAT, NAT Routing but i think I am going something wrong (definitely).

 

Can someone here please help me with some steps?

 

 

Thanks

 

config
design

1 Reply

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 18, 2013
    You'll need to configure a 'routing VIP' (or two), enabled only on the 'inside' VLAN(s) along with suitable SNATting.

     

     

    "A BIG-IP is a deny by default device. It will not act as a router for traffic; static and attached interface routes are used only when handling traffic for a Virtual Server, NAT or SNAT. This behaviour can be changed by creating ‘routing’ Virtual Servers"

     

     

    See the 'Emulating stateless IP routing with BIG-IP LTM forwarding virtual servers' section of this document for configuration information: http://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html