For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
May 12, 2010

Is this possible with a single LTM?

I have 3 servers (acts like routers) with 2 interfaces each, say in1 and int2. When traffic hits int1, it gets routed through int2 to other resources on the internet or intranet based on the criteria ...
config
design
meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
May 18, 2010
Thank you for your response Hamish.

 

 

I am testing this in the lab.

 

 

I added two appliances behind F5 and created a VS for the int1 side.

 

 

I configured automap for SNAT. I tried to use the DNS ( an intranet resource) for testing. The client traffic hit the VS and was sent to appliance1. The source IP became the selfIP of that vlan on LTM. When the traffic got routed to the DNS server through int2, DNS server sent the response bypassing the int2 side of the appliance

 

 

This is what is happening.

 

 

client (10.27.9.16) -> VS 10.10.31.116

 

 

SNAT automap is configured on the VS.

 

 

Now the source becomes the selfIP which is 10.22.232.5

 

 

Appliance forwards the traffic to the DNS server 10.22.238.101 through the int2 interface,

 

Source is still the self IP of 10.22.232.5

 

 

When DNS server sends the response, it directly sends it to the self IP through its default gateway which is a router.

 

 

I have to somehow force the traffic to come back through int2 of the appliance. I tried different SNATs but could not get the traffic come back to int2.

 

 

Is this possible with SNAT?

 

 

Meena