For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MCP200_297965's avatar
MCP200_297965
Icon for Nimbostratus rankNimbostratus
Nov 03, 2016

Need help with sFTP please.

Hi Guys,

 

I need assistant with setting up SFTP through F5 please.

 

My environment is as follows

 

Public IP Address > NAT'd to External DMZ IP - our External DMZ VLAN will need to exits the F5 on our Internal DMZ VLAN. How do I go about accomplishing this through F5 please?

 

Thank u

 

BIG-IP
devops
iRules
security

3 Replies

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Nov 04, 2016

    Are you load balancing SFTP connections or is it passing through the F5 to a server behind it ?

     

    Have you tried setting it up and is it not working ? If so, what is your current setup ?

     

  • berkleyapac_259's avatar
    berkleyapac_259
    Icon for Nimbostratus rankNimbostratus
    Nov 04, 2016

    I deleted all profiles except for the VIP. Also, from the internal DMZ I can definitely ping the VIP. However, SFTP is still failing when coming from the cloud. I can definitely see the on the FW that SSH coming for that public ip is allowed.

     

    • james_lee_31100's avatar
      james_lee_31100
      Icon for Nimbostratus rankNimbostratus
      Nov 04, 2016

      It doesn't support snat, try point your pool member gateway to lb floating ip