Forum Discussion

omar05_132659's avatar
omar05_132659
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

Outbound IPs for mail and navigation traffic

Hello friends,   Yes, I know it is a basic question, but I need help due to I am new in F5 deployments. Please..! I'd appreciate any help you provide.   I was given two pools of public IPs. One...
BIG-IP Access Policy Manager (APM)
deployment
design
nat
outgoing
security
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Aug 30, 2013

    You can have a the second SNAT Pool with your three public IP addresses attached to a 0.0.0.0:* Virtual listening on your internal VLAN to handle outgoing traffic.

     

    If you only have on mail server then you will only have one virtual to point to it. Unless you need a mail server endpoint in each ISP VLAN? Then just create three virtual's, each attached to an external ISP's VLAN, using the same mailserver pool. That handles the incoming traffic. For outbound traffic from the mail server use a 0.0.0.0:25 virtual on the inside VLAN with the first SNAT pool.

     

omar05_132659's avatar
omar05_132659
Icon for Nimbostratus rankNimbostratus
Sep 09, 2013

Hello,

 

I have already configured a three-specific IP(one of each ISP) SNAT pool and associated it to a 0.0.0.0:0 virtual server which will handle outbound user navigation traffic. When a user tried to sail in the Internet, he received a different public IP each time he asked "What is mi IP". But, those public IPs were the Self IPs I have configured in the F5 Link Controller. It seems that the SNAT pool I associated (specific public IPs for user navigation) is not taking the effect because he is receiving the Self IPs instead. Where could be the error? It is posible such conf?

 

I guess the same will happen when I try to send outbound mail traffic across the three ISPs by using specific IPs.

 

Hope you could help me. I'll really appreciate it.

 

Regards

 

Omar