For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Daniel_55334's avatar
Daniel_55334
Icon for Altostratus rankAltostratus
Apr 15, 2015

NAT on LTM or firewall?

We are going to add LTM to a customer network to do outgoing ISP load balance.   Internet router --- LTM --- firewall --- core switch   Firewall currently performs NAT for outgoing Internet tra...
application delivery
design
LTM
BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Apr 15, 2015

It's all up to you. If you are not making any decisions based on Source IP, then it doesn't really matter where you NAT.

 

If you are using for example, Source Address Affinity persistence, then you may want to do the NAT on the LTM.

 

BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Apr 16, 2015
You're not wrong, but most people are not that strict about using the word "NAT". In my experience, it's generally safe to assume that when someone says NAT, then they talking about the F5 SNAT. If I was wrong, I am sure he will clarify, and I will correct my statement to suit.