iRule Implementation (SNAT)

Hi Touch,

Undestood. Thank you for the clarification.

Let me rephrase the what I think might be happening and what you can do.

There are 2 items that might be causing your issue

1) You are using matchclass command without a datagroup

2) The iRule event you are using (CLIENT_ACCEPTED) is only triggered when the client side of the connection is established but before the F5 has choosen the server IP through it's normal load balancing decision that you have configured.

My thoughts are to use LB_SELECTED event which is triggered after the F5 has choosen the pool member and replacing the matchclass command

The iRule would look like the following

when LB_SELECTED {
    log local0 "The Client IP is [IP::client_addr] and the node IP is [IP::remote_addr]"
    if {[IP::addr [IP::client_addr] equals 192.168.1.2] and [IP::addr [LB::server addr] equals 192.168.2.2]} {
      snat 192.168.2.3
     } else {
      snat none
    }
}

I hope this helps

Bhattman