For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

drhawkings_2156's avatar
drhawkings_2156
Icon for Nimbostratus rankNimbostratus
May 07, 2010

Need help to explain VLAN TRAFFIC,VLAN LIST,SNAT POOL

Can someone help to explain these config? What is mean by "enable on vlan list",snat pool, address translation,port translation with reference to the config in the screenshot attached.Yr help is great...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
May 07, 2010
The 'enable on vlan list' is used to limit the VLAN's on which a VS listens or accepts traffic from.

 

 

The SNAT pool is used to specify a pool of addresses that is used for performing SNAT (Source NAT) on proxied connections. The SNAT addresses are local to the F5 device.

 

 

Address and Port translation are where the outgoing connection (server side) from the F5 have their source IP and port set to the CLIENT side address and port, so the backend servers think that the connection is being made from the originating client (As the F5 sees it) and not as a proxied connection from the F5 device.

 

 

H