For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Glenn_32974's avatar
Glenn_32974
Icon for Nimbostratus rankNimbostratus
Aug 04, 2010

Outbound IPSEC traffic via Link Controller

Im having an Issue where Im trying to establish a VPN site-2-site connection through a Link Controller but outbound traffic is being SNAT'ed in the way out so my VPN peer at the other end of the tunn...
config
design
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Aug 04, 2010
You might have to turn on "NAT-Traversal" on both ends. That's how I got mine working. Also, if you simply want to change SNAT, you can use an iRule... 
when CLIENT_ACCEPTED {
if { [ip::addr [ip::client_addr] eq x.x.x.x } {
snatpool x.x.x.x }
}
Something like that would work, where snatpool x.x.x.x contains the address you want this to show up as. Edit - I like John's idea quite a bit too!