For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_123856's avatar
David_123856
Icon for Nimbostratus rankNimbostratus
Jul 21, 2014

Is it possible to change Source IP of AAA HTTP Traffic

I've followed the steps in this doc (https://devcentral.f5.com/articles/one-time-passwords-via-an-sms-gateway-with-big-ip-access-policy-manager) about setting up SMS one time pins and have it all wor...
BIG-IP Access Policy Manager (APM)
security
MiLK_MaN_61922's avatar
MiLK_MaN_61922
Icon for Nimbostratus rankNimbostratus
Jul 22, 2014

You are likely going to have to create a dummy VS which then allows you to use snat automap or snatpools (or even an iRule using the snat command).

 

APM is a little inflexible in the way you can control how certain things are delivered by the BIG-IP out, but we've always historically used a dummy VS to override some of the undesired behaviours.

 

Once you create the dummy VS, just points the APM settings to the VS instead of the HTTP server, and of course have the HTTP server as the pool member for the VS.

 

David_123856's avatar
David_123856
Icon for Nimbostratus rankNimbostratus
Jul 22, 2014
Ta, I'll give that one a try. So the only thing that I'll have to be careful of is the VS will only have the IP as a pool member, so if the SMS provider changes IPs I'll have an issue yeah? Any other things to look out for?