For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

agriesser's avatar
agriesser
Icon for Nimbostratus rankNimbostratus
Apr 07, 2014

NAT Exemption / Next-Hop Routing

Hey there,   I got a tricky situation here, let me try to outline it as simple as possible. I do have a BigIP LTM running 10.2.4HF7 here which has one Uplink-VLAN (public ip space), several intern...
application delivery
devops
iRules
LTM
network
routing
snat
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Apr 07, 2014

routes on big-ip are just that, a forwarding table for packets to follow. the magic happens on virtual servers. So I think what you want is:

Default forwarder 0.0.0.0/0 w/ snat automap (or snat pool with specific IP)
192.168.1.0/24 forwarder w/ vlan source of other internal vlan(s) (and maybe ipsec link if necessary), no nat
192.168.2.0/24 forwarder w /vlan source of other internal vlan(s) (and maybe ipsec link if necessary), no nat
192.168.99.0/24 forwarder w/ vlan source of internal vlan(s), no nat