NAT iRule not functioning

Hopefully this is a basic oversight on my behalf.

 

 

I have a single VS (10.1.1.53:0) with 2 members 10.1.2.206 and 207. No SNAT pool or Automap is defined in VS. SNAT, if required, is performed with the use of an iRule. The iRule is shown below:

 

 

when CLIENT_ACCEPTED {

 

Check if client is in 10.1.2.0/24 subnet

 

if {[IP::addr [IP::client_addr] equals 10.1.2.0/24]}{

 

Use the snatpool

 

snatpool Pool_snat_1}

 

}

 

 

The SNAT Pool mentioned has the addresses 10.1.2.44 and 45 in it.

 

 

Monitoring traffic I see that the source of the requests are actually the F5 non-floating self IP. I dont understand why. Traffic output below:

 

 

tcpdump -i Internal -n host 10.1.1.53

 

tcpdump: listening on Internal

 

10:22:48.918620 10.1.2.117.2045 > 10.1.1.53.microsoft-ds: S 1796654770:1796654770(0) win 65535 (DF)

 

10:22:48.918627 10.1.1.53.microsoft-ds > 10.1.2.117.2045: S 441223112:441223112(0) ack 1796654771 win 4380 (DF)

 

10:22:48.918755 10.1.2.117.2045 > 10.1.1.53.microsoft-ds: . ack 1 win 65535 (DF) 10:22:48.919014 10.1.2.117.2045 > 10.1.1.53.microsoft-ds: P 1:138(137) ack 1 win 65535 (DF)

 

10:22:48.919389 10.1.1.53.microsoft-ds > 10.1.2.117.2045: P 1:210(209) ack 138 win 4517 (DF)

 

10:22:48.919987 10.1.2.117.2045 > 10.1.1.53.microsoft-ds: P 138:408(270) ack 210 win 65326 (DF)

 

10:22:48.920302 10.1.1.53.microsoft-ds > 10.1.2.117.2045: P 210:762(552) ack 408 win 4787 (DF)

 

10:22:48.920733 10.1.2.117.2045 > 10.1.1.53.microsoft-ds: P 408:1068(660) ack 762 win 64774 (DF)

 

10:22:48.924123 10.1.1.53.microsoft-ds > 10.1.2.117.2045: P 762:994(232) ack 1068 win 5447 (DF)

 

 

tcpdump -i Internal -n host 10.1.2.207 tcpdump: listening on Internal

 

10:28:58.283366 10.1.2.2.3317 > 10.1.2.207.https: S 3342204928:3342204928(0) win 512 (DF)

 

10:28:58.283510 10.1.2.207.https > 10.1.2.2.3317: R 0:0(0) ack 3342204929 win 0 (DF) 10:28:59.283462 10.1.2.2.3320 > 10.1.2.207.microsoft-ds: S 3358982144:3358982144(0) win 512 (DF)

 

10:28:59.283664 10.1.2.207.microsoft-ds > 10.1.2.2.3320: S 3674944488:3674944488(0) ack 3358982145 win 8192 (DF)

 

10:28:59.283841 10.1.2.2.3320 > 10.1.2.207.microsoft-ds: R 3358982145:3358982145(0) win 0 (DF)

 

10:29:08.284194 10.1.2.2.3339 > 10.1.2.207.https: S 3509977088:3509977088(0) win 512 (DF)

 

10:29:08.284355 10.1.2.207.https > 10.1.2.2.3339: R 0:0(0) ack 3509977089 win 0 (DF) 10:29:09.284306 10.1.2.2.3342 > 10.1.2.207.microsoft-ds: S 3526754304:3526754304(0) win 512 (DF)

 

10:29:09.284501 10.1.2.207.microsoft-ds > 10.1.2.2.3342: S 4207201783:4207201783(0) ack 3526754305 win 8192 (DF)

 

10:29:09.284582 10.1.2.2.3342 > 10.1.2.207.microsoft-ds: R 3526754305:3526754305(0) win 0 (DF)

 

10:29:18.285000 10.1.2.2.3361 > 10.1.2.207.https: S 3677749248:3677749248(0) win 512 (DF)

 

10:29:18.285176 10.1.2.207.https > 10.1.2.2.3361: R 0:0(0) ack 3677749249 win 0 (DF)

 

 

Any assistance or guidance would be appreciated.