For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chad_Davis_3021's avatar
Chad_Davis_3021
Icon for Nimbostratus rankNimbostratus
Mar 26, 2008

Outbound Snat Single Host

I need to know how to snat a private IP (ie 10.1.1.1) to a public in the LTM using an iRule. I'm sorry if there is already an example I have been unable to find it.
application delivery
dev
devops
iRules

2 Replies

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Mar 26, 2008
    Can you describe the IP address scheme of your layout and what traffic flow of what you want to snat

     

     

    I.E.

     

    Internet <----> [Exteranal Side Firewall | Internal Side Firewall ] <--->[ External Side LB | Internal side LB] <---> Internal Servers (behind the F5)

     

     

     

    is the external side LB using public or private address?

     

     

    Do you want to translate the IP address of the Internal Server to a public IP address as it's going towards the internet?

     

     

     

    /cb

     

     

  • Chad_Davis_3021's avatar
    Chad_Davis_3021
    Icon for Nimbostratus rankNimbostratus
    Mar 27, 2008
    I have the following:

     

     

    Internet <---> F5 LTM (LB W/Public IP)<--->Firewall (Private IP 192.168.X.X) <---> PC (Private Address 10.1.X.X)

     

     

    I need the PC to have an IP on one of the two load balanced ISP connections. This will be a public IP for all services TCP/UDP. I know how to snat smtp. How do I snat an Internal IP to a Public IP ?