Forum Discussion
sstafford
Nimbostratus
Dec 15, 2009Irules and Internet connections for Servers with non-routable IP addresses
Hi all,
I have a situation I'm trying to address via an iRule on the BigIP, and wanted to see what you think.
We have an internal vlan routed by an F5 that consists of pr...
sstafford
Nimbostratus
Dec 16, 2009Ok, think I've got it.
when CLIENT_ACCEPTED {
check to see if client ip is in the class
if { [matchclass [IP::client_addr] equals $::privateOnCampus] } {
Check to see if the remote ip is in the class
Since this is an outgoing connection, it will use IP::local_addr
if { [matchclass [IP::local_addr] equals $::offCampusServers] } {
if both of the above are correct, log it, and snat it
log local0. "Match [IP::client_addr] server [IP::local_addr]"
snat 152.19.240.2
} else {
if no match forward without address rewrite.
forward
}
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects