For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Sanchez_27's avatar
Eric_Sanchez_27
Icon for Nimbostratus rankNimbostratus
Apr 04, 2010

Is there an iRule to have an alternative way of doing SNAT AUTOMAP?

I have this iRule:   when CLIENT_ACCEPTED {   if { [matchclass [IP::client_addr] equals $::x_Hosts]} {   snatpool x_SNAT   }   }     x_Hosts = I dont understand the...
application delivery
dev
devops
iRules
Eric_Sanchez_27's avatar
Eric_Sanchez_27
Icon for Nimbostratus rankNimbostratus
Apr 04, 2010
Another question is if I have two sets of VIPs and Pools.

 

 

VIP A (10.10.10.x/24)

 

Pool A (10.10.11.x/24)

 

 

VIP B (10.10.20.x/24)

 

Pool B (10.10.21.x/24)

 

 

If my iRULE SNAT consists of x_HOSTS=10.10.11.0/24 (network of Pool A) and my X_SNAT=10.10.11.5 (IP in Pool A)... can I use that same iRULE SNAT for the VIPs/HOSTs for the B too? Or would that break functionality and I would need to create an iRULE SNAT data group for the pool B group?