For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Maverick_80689's avatar
Maverick_80689
Icon for Nimbostratus rankNimbostratus
Sep 10, 2014

Internet access doesnt work with LB as gateway and snat disabled but if we use a snatpool it works. Does anybody know why?

Internet access doesnt work with LB as gateway and snat disabled but if we use a snatpool it works. I am not sure what will be the source addr of outbound internet traffic when it passes through our ...
design
Chris_Wentland's avatar
Chris_Wentland
Icon for Nimbostratus rankNimbostratus
Sep 11, 2014

I think you may need to post the config of your Forwarding Virtual Servers. This sounds like a one armed configuration, and if the BigIP is the gateway, you will need to allow loose initiation on the forwarding Virtual Server to allow responses to traffic generated directly to the servers. Also, get a traffic capture so you can match up your traffic and which VS is processing it.

 

tcpdump -X -npi 0.0:nnn -s 0 host 1.2.3.4 (of course change this to your test host)

 

It will show you the VS name that is processing traffic, highlighted in bold below. If this listener is blank, then the BigIP could not match the traffic to an acceptable VS.

 

14:29:57.186546 IP xx.xx.xx.xx.10095 > xx.xx.xx.xx.http: R 1:1(0) ack 1 win 0 out slot1/tmm3 lis=dev.my.host flowtype=64 flowid=987FB00 peerid=0 conflags=124 inslot=0 inport=0 haunit=1 peerremote=00000000:00000000:00000000:00000000 peerlocal=00000000:00000000:00000000:00000000 remoteport=0 localport=0 proto=0 vlan=0