For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Robb_Lyall_1456's avatar
Robb_Lyall_1456
Icon for Nimbostratus rankNimbostratus
Aug 11, 2014

Passing source IP through VIP for secure ftp server connections

I have a customer that has access lists by IP address on a pair of FTP servers sitting behind a BigIP LTM 11.4.1 HF2. Is there a way to pass the original source IP address and have the ftp authenticate and return traffic through the VIP?

 

application delivery
LTM

1 Reply

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Aug 11, 2014

    You could possibly accomplish this by not using SNAT on the FTP virtual server. This will pass the traffic through to the FTP server with a source IP address of the actual client. The FTP server however will need to route the traffic back out through the LTM in order for it to get back to the client. If you set the FTP server's default route to the LTM, this setup could work.