For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Aug 17, 2012

iRule for bypassing SNAT when routing

We are changing the logical setup of our network behind our LTM and I'm trying to find out how to write an iRule that does what I need. Our servers sit on a private network behind the LTM and we want...
application delivery
dev
devops
iRules
Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Aug 18, 2012
Thanks for the response. I've got this on a Forwarding virtual server which is applied to the 'internal' VLAN. The problem still exists - when I ping, sourced from 172.16.56.10 to 172.16.20.21, the response is still coming from the VIP configured on the 'external' VLAN. Maybe my Forwarding virtual server is not correct:

 

 

virtual address 172.16.56.0 {

 

mask 255.255.255.0

 

server none

 

}

 

virtual Backend_Forwarding {

 

ip forward

 

destination 172.16.56.0:any

 

mask 255.255.255.0

 

rules cs_snat_bypass

 

vlans internal enable

 

}

 

route 172.16.56.0/24 {

 

gateway 172.16.30.249

 

}