Forum Discussion
David_123856
Nimbostratus
NimbostratusIs it possible to change Source IP of AAA HTTP Traffic
I've followed the steps in this doc (https://devcentral.f5.com/articles/one-time-passwords-via-an-sms-gateway-with-big-ip-access-policy-manager) about setting up SMS one time pins and have it all wor...
MiLK_MaN_61922Nimbostratus
NimbostratusYou are likely going to have to create a dummy VS which then allows you to use snat automap or snatpools (or even an iRule using the snat command).
APM is a little inflexible in the way you can control how certain things are delivered by the BIG-IP out, but we've always historically used a dummy VS to override some of the undesired behaviours.
Once you create the dummy VS, just points the APM settings to the VS instead of the HTTP server, and of course have the HTTP server as the pool member for the VS.
David_123856Ta, I'll give that one a try. So the only thing that I'll have to be careful of is the VS will only have the IP as a pool member, so if the SMS provider changes IPs I'll have an issue yeah? Any other things to look out for?- MiLK_MaN_61922Yes, if the SMS provider changes IP's, you will run into some problems. If the SMS provider uses hostnames, it is possible to write a script that will resolve the DNS and then modify the pool member with the results. I'd avoid this is you can and potentially ask the SMS provider how often they change the IP, then establish the risk vs reward of whatever avenue you go down.
