For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Daniel_55334's avatar
Daniel_55334
Icon for Altostratus rankAltostratus
Apr 15, 2015

NAT on LTM or firewall?

We are going to add LTM to a customer network to do outgoing ISP load balance.   Internet router --- LTM --- firewall --- core switch   Firewall currently performs NAT for outgoing Internet tra...
application delivery
design
LTM
BinaryCanary_19's avatar
BinaryCanary_19
Historic F5 Account
Apr 15, 2015

It's all up to you. If you are not making any decisions based on Source IP, then it doesn't really matter where you NAT.

 

If you are using for example, Source Address Affinity persistence, then you may want to do the NAT on the LTM.

 

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Apr 16, 2015
Good to know, still a lot to learn. I tried to figure out how to configure SNAT to allow access to internal servers that are using private IP - can't find a way :-( I have to be missing something here :-( With servers using public IPs I can figure it more or less but not with private. I will appreciate a lot for any hints how to do such setup. Piotr