Forum Discussion
Enfield303
Nimbostratus
NimbostratusPersistence and NAT
Hello, we're using an F5 BIG IP active/passive cluster to loadbalance Always On VPN connections. To avoid asymmetric routing we're using NAT, so the VPN gateway servers will always see the same IP ad...
Enfield303Nimbostratus
NimbostratusThanks Amine - yes we do have upstream devices also doing SNAT:
client machine on internet
|
|
\|/
Azure cloud loadbalancer (required for cloud F5 loadbalancer failover)
I
|
\I/
Cloud F5 loadbalancer
|
|
\|/
Organisation firewall
I
|
\I/
Internal F5 loadbalancer
|
|
\|/
Backend VPN servers
I'm assuming that if I disable source address translation / SNAT on everything above the internal F5 loadbalancers then it should work as you've described?