Forum Discussion
Jliz_44390
Nimbostratus
Jul 27, 2007Matching Source and Destination for NAT
I've let this simple problem drive me nuts now for a day and half and I've yet to find the solution.
I'm trying to NAT when a request is made from a server behind the LB to a VIP on the same...
Deb_Allen_18
Jul 27, 2007Historic F5 Account
You can set up a selective SNAT instead of using an iRule.
Enable SNAT AutoMap on at least one floating self-IP address on the egress VLAN.
Then create a new SNAT, with the following settings:
-Translation: Automap
-Origin: Address List
--Type: Network
--Address: 10.100.104.0
--Mask: 255.255.255.0
-Enabled on: At least the egress VLAN
And finally, if the traffic will traverse a pool, ensure that "Allow SNAT" is still enabled on that pool. (Enabled by default)
That will translate all connections originating from the address list to the automap address, and all other connections will go un-SNAT'd.
/deb
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects