For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lior_54850's avatar
Lior_54850
Icon for Nimbostratus rankNimbostratus
May 19, 2012

Internal servers accessing the web

Hello all,     I'm fairly new to F5's and I've hit a bit of a wall. I have a fairly simple setup of 2 web servers behind 1 3400 LTM load balancer (running 9.4.5). I'm trying to get my 2 web serv...
config
design
Lior_54850's avatar
Lior_54850
Icon for Nimbostratus rankNimbostratus
May 20, 2012
Hey All,

I just wanted to give you an update on the issue. I did some digging and found a way of using an iRule to accomplish the required effect. On my catch all forward VIP I added the following iRule 

 
when LB_SELECTED { 
  set public_ip 192.168.1.176  

  if { [IP::addr [IP::client_addr] equals 192.168.3.0/24]  
      && not [IP::addr [IP::local_addr] equals 192.168.0.0/16]} {

    snat $public_ip
  } elseif { [IP::addr [IP::client_addr] equals 192.168.4.0/24]  
      && not [IP::addr [IP::local_addr] equals 192.168.0.0/16]} {
     
    snat $public_ip
  } else {
    forward
  }
}

Thanks