Forum Discussion

Miron_du_Plessi's avatar
Miron_du_Plessi
Icon for Nimbostratus rankNimbostratus
Sep 12, 2008

Internal to External Flows

Hi,

 

 

Can anyone confirm how LTM handles flows from internally defined nodes which use the LTM as its gateway.

 

 

For example a web server that needs to communicate to an NTP or DNS server logically on the external side of the LTM. Does any configuration need to be done in order to achieve this.

 

 

Regards

 

 

Miron
config
design
  • dennypayne's avatar
    dennypayne
    Icon for Employee rankEmployee
    Sep 12, 2008
    Yes, LTM is a default deny device. You either need to SNAT or NAT internal connections to an external IP address, or use a wildcard forwarding virtual server (0.0.0.0:0) to allow the traffic in and out. If any NetBIOS is involved the NAT/SNAT method probably won't work, so I tend to prefer the forwarding virtual method. When using that, the LTM's gateway will likely need a static route to the network behind LTM pointing to the LTM's external address (floating address for redundant pairs).

     

     

    Denny