For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

benlui_9160's avatar
benlui_9160
Icon for Nimbostratus rankNimbostratus
Sep 08, 2009

NAT for whole internal subnet

I am using BIG-IP HA pair with 2 segments, external (203.194.252.x) and internal (192.168.0.x).     bigip has 1 floating ip (203.194.252.123)   my internal hosts need to access externa...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 08, 2009
I'd avoid NATs and instead use a virtual server. A network virtual server would allow you to pass traffic from clients on the internal VLAN to the outside VLAN. You could configure a forwarding IP virtual server on 203.194.252.0/24 and enable it only on the internal VLAN. If you want LTM to perform source address translation on the LTM to destination host connections, you can enable SNAT automap on the VIP.

 

 

Aaron