Forum Discussion

Paolop_70093's avatar
Paolop_70093
Icon for Nimbostratus rankNimbostratus
Nov 21, 2008

Not SNAT base on destination port.

the F5 is configure with SNAT. Is it possible to use the Iruless to tell F5 not to SNAT base on the Destination port?

 

For example:

 

If the client try to send a TCP packet with destination port 1801. The F5 should not SNAT the source IP address of the client, It should forward the packet using the the Source IP address of the client and not the IP address of the F5.

 

Thanks
application delivery
dev
devops
iRules

2 Replies

  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Nov 21, 2008
    The command you're looking for is the snat command - Click here

     

     

    You could simply say "snat none" when you find the clients connecting to the given TCP destination. That should bypass the configured snat on the system.

     

     

    Colin
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 24, 2008
    Hi Paolo,

     

     

    You can check this post for an example:

     

     

    Intelligent SNAT help (Click here)

     

     

    Aaron