Forum Discussion

Thomas_Knutson_'s avatar
Thomas_Knutson_
Icon for Nimbostratus rankNimbostratus
May 19, 2011

iRule to autonat for specific client subnets

We have a need to have certain client requests use the autonat function, specifically for devices on our internal subnets that call our virtual servers. For example, we want to only use autonat ...
basic
getting started
new to f5
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 19, 2011
Hi Thomas,

I'd add the three networks to an address datagroup and then use the class match command to see if the client IP is in the datagroup ranges: 


when CLIENT_ACCEPTED {
    Check if the client IP is in the client_ip_class datagroup
   if {[class match [IP::client_addr] equals client_ip_class]}{
      snat automap
   }
}

Aaron