Forum Discussion
Alpesh_Patel_38
Nimbostratus
NimbostratusiSNAT based on destination address?
Hello Everyone,
we have req.to use iSANT where only selected traffic flows need to be SANTed. We are trying to use "destination IP" as a selection critera? -
example: We only need to SANT the traffic from source IP addresss (x.x.x.1, x.x.x2) to destination y.y.y.1 but all other traffic from the sources (x.x.x.1, x.x.x2) should be left unchnaged.
I wanted to how we can achieve it and if anybody has used it
how efficiant (performance wise) it is using in production network where about 25M internet/intranet traffic passing thru the F5?
1 Reply
kykong_107132Hi,
I have come out a sample irule, hope it work in your environment. basically, you need to create a data group name it as clientIP with all the client IP address as the member. then in your irule, you use matchclass commmand to match the clientip address. happy trying.
class clientIP {
x.x.x.1
x.x.x.2
}
when CLIENT_ACCEPTED {
if { [matchclass[IP::client_addr] eq $::clientIP] and [IP:addr [IP::local_addr] eq y.y.y.1]} {
snat z.z.z.1
} else {
gateway_pool
}
}
