Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

NoelMcK_381487's avatar
NoelMcK_381487
Icon for Nimbostratus rankNimbostratus
Feb 17, 2019

Outbound SNAT with private external address

I need to setup an outbound sftp connection from the 10.x.x.x servers to the Internet beyond the FW. Configuring a SNAT outbound from source 10.x.x.x servers to a source 200.x.x.x/32 address on ...
application delivery
LTM
RaghavendraSY_7's avatar
RaghavendraSY_7
Icon for Cumulonimbus rankCumulonimbus
Feb 17, 2019

Configuration should be like below: F5 (10.X.X.X) --- > Firewall (172.x.x.) ---> NAT should be on firewall for 172.x.x.x to 200.x.x.x

 

You need to configure as mentioned below:

 

  1. Configure F5 VIP and pool member should be 172.x.x.x. For example pool member is 172.1.1.1
  2. You should create NAT on Firewall for 172.1.1.1 and it should map to public IP 200.1.1.1
  3. F5 should have routes towards firewall
  4. Firewall should have route towards internet.

I hope this helps.

 

RaghavendraSY_7's avatar
RaghavendraSY_7
Icon for Cumulonimbus rankCumulonimbus
Feb 17, 2019

Can you please provide F5 interface IP address details. I am assuming like this.

 

F5 internal IP address is 10.x.x..x F5 external IP address is 172.x.x.x towards firewall. Firewall external IP address will be external IP's Firewall internal IP address will be internal IP's.