For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wtwagon_99154's avatar
wtwagon_99154
Icon for Nimbostratus rankNimbostratus
Sep 17, 2013

Is it possible to disable NAT selectively

I.e.   If applied to a IP forward VIP, is it possible to selectively no-NAT via an iRule, similar to the following:   when CLIENT_ACCEPTED { snat none }   Or does this iRule statement also r...
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Sep 17, 2013

you can be more selective than just the event itself, limiting to particular subnets or host. Details on snat behavior from iRules from the snat command page in the iRules wiki:

 

Causes the system to assign the specified source address to the serverside connection(s). The assignment is valid for the duration of the clientside connection or until 'snat none' is called. The iRule SNAT command overrides the SNAT configuration of the virtual server or a SNAT pool. It does not override the 'Allow SNAT' setting of a pool.