Forum Discussion
aj1
May 02, 2015Nimbostratus
IP Forwarding Virtual Server v/s SNAT
Trying to understand the difference between the two. Can either one of them be used for forwarding traffic from load balanced nodes (private addresses) to the internet?
We have LTMs in an HA pa...
nitass_89166
May 02, 2015Noctilucent
oops, sorry it should be IP::local_addr rather than IP::server_addr.
ltm data-group internal node_address {
records {
10.10.10.1/32 { }
10.10.10.2/32 { }
}
type ip
}
ltm data-group internal campus_address {
records {
65.66.67.68/32 { }
}
type ip
}
ltm rule qux {
when CLIENT_ACCEPTED {
if { [class match -- [IP::client_addr] equals node_address] } {
if { [class match -- [IP::local_addr] equals campus_address] } {
snat none
} else {
snat 190.191.192.193
}
}
}
}
- aj1May 02, 2015NimbostratusGreat! Thank you again for the rule and config. I'll try this. So, if we want to do selective snat, a forwarding vserver and irule is the way to go. Cannot do this by only creating a snat object and specifying inside/outside addresses. Just want to make sure.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects