For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fuatd_30923's avatar
fuatd_30923
Icon for Nimbostratus rankNimbostratus
Sep 17, 2009

iRule SNAT

hi all,

 

 

i have 2 web servers with the ip addresses 10.113.21.75 and .76 with the Virtual address 10.113.21.77. interface of this subnet (10.113.21.0 /24) is internal interface. external interface subent is 10.113.22.0/24. When a client on internal interface want to send packet on the same subnet. we use SNAT with the ip address of the external interface ip address which is 10.113.22.254.

 

However, not only sending packets to the same subnet, all packets which are sent to external interface are also translated to 10.113.22.254.

 

I want to set up an irule for this issue. i examined one or two irule examples but i have not find the exact irule for may case.

 

I will be very thankful to any help.

 

application delivery
dev
devops
iRules

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 17, 2009
    Can't you just set the VIP to SNAT using automap so LTM will use the self IP on the internal VLAN? It would mean you don't need a route on the servers to the external VLAN. If you don't want to use automap, you could create a SNAT pool with a new IP address on the internal VLAN and assign that to the virtual server.

     

     

    Aaron