Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Jliz_44390's avatar
Jliz_44390
Icon for Nimbostratus rankNimbostratus
Jul 27, 2007

Matching Source and Destination for NAT

I've let this simple problem drive me nuts now for a day and half and I've yet to find the solution.     I'm trying to NAT when a request is made from a server behind the LB to a VIP on the same...
application delivery
dev
devops
irules
Esa_Kuusisto_27's avatar
Esa_Kuusisto_27
Icon for Nimbostratus rankNimbostratus
Aug 01, 2007

Hi

Thanks for the help. With examples I made a simple iRule:


when CLIENT_ACCEPTED {
  if { ( [matchclass [IP::client_addr] equals $::NattedNetwork] )
and  [matchclass [IP::remote_addr] equals $:rivateNetwork]}{
  forward
    
} elseif { [matchclass [IP::client_addr] equals $::NattedNetwork] }{
snat automap
} else {
forward
}
}

Class NattedNetwork is network where I do not want to use SNAT and class PrivateNetwork is network where I want to NAT in certain cases.

-Esa

PS. I know, last else with forward is not needed