LTM migration for Proxy, Anti-Spam and web servers

You can do away with SNAT if you create a self IP and floating IP on the LTM. This means you'll need 3 IP's per inside vlan - one for the active unit, one for the standby unit and one floating IP across both units (provided you have a HA set up).

 

 

The real machines that you are load balancing behind the F5 will then have their gateway changed to the floating IP and because you're not using SNAT, the real machines will see the src address as that of the client. Return traffic will also go back via the LTM because you've set the real machine's default gateway to the floating IP. Once again documentation for network related stuff to do with the F5 is pretty poor and we only found out about avoiding SNAT through a colleague who had been working with F5's for many years.

 

 

Hope that helps...

 

 

Andy