For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Jan 15, 2016

iRule to match IP subnet in a routing domain

I need an iRule that matches a network subnet that is also a routing domain. In human terms, I need to match this: 10.15.115.0%1/24 Currently I am using this code and it works, but I want to be m...
application delivery
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 25, 2016

Hi Ken,

Its not a shame to have a non-SNAT scenario. Well, its far better (but more complex) than auto-natting everything... 😉

A customer of mine is using the iRule below to intelligently [snat] traffic depending on the source and destination of the connections...

 

when LB_SELECTED {
    if { [IP::addr [getfield [IP::client_addr] "%" "1"]/16 equals [getfield [LB::server addr] "%" "1"]/16] } then {
        snatpool Live_Global_SNAT_Pool 
    } 
}

 

Note: Responding in a new answer, to enable code high lighting....

Cheers, Kai