F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

benlui_9160's avatar
benlui_9160
Icon for Nimbostratus rankNimbostratus
Sep 08, 2009

NAT for whole internal subnet

I am using BIG-IP HA pair with 2 segments, external (203.194.252.x) and internal (192.168.0.x).     bigip has 1 floating ip (203.194.252.123)   my internal hosts need to access externa...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 08, 2009
I'd avoid NATs and instead use a virtual server. A network virtual server would allow you to pass traffic from clients on the internal VLAN to the outside VLAN. You could configure a forwarding IP virtual server on 203.194.252.0/24 and enable it only on the internal VLAN. If you want LTM to perform source address translation on the LTM to destination host connections, you can enable SNAT automap on the VIP.

 

 

Aaron