F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

SecData_Support's avatar
SecData_Support
Icon for Nimbostratus rankNimbostratus
Oct 27, 2017

NAT/PAT query: manage non-routable servers

Hi guys,   We've got some back-end servers (172.16.19.40, 172.16.19.41 and 172.16.19.42) in our DMZ, residing in a non-routable network. We'd like to be able to manage them via SSH from these netw...
BIG-IP
devops
LTM
security
SecData_Support's avatar
SecData_Support
Icon for Nimbostratus rankNimbostratus
Nov 02, 2017

Hi J,

 

I appreciate your approach. Considering we have 3 x back-end servers, that would have meant 3 x VIPs.

 

We wanted to minimize the number of new VIPs created, hence went for the following approach -

 

Created 1x VIP with an IP part of the internal routable VLAN, listening on all ports, with pool associated, with an iRule bound to it, switching/translating incoming custom port front-end connections (2240, 2241, 2242) to their relevant back-end nodes 172.16.19.40, 172.16.19.41 and 172.161.9.42 over port 22.

 

Your support is appreciated!

 

Regards.