For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bojan_sukalo_20's avatar
bojan_sukalo_20
Icon for Nimbostratus rankNimbostratus
Jul 06, 2015

Plain old NAT and SIP

Hello,   What would be the easiest way to just NAT SIP traffic without terminating SIP connection on F5 as suggested in their official document here https://www.f5.com/pdf/deployment-guides/load-b...
nat
sip
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 06, 2015

A simple NAT configuration would work just fine.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-concepts-11-4-0/17.htmlconceptid

 

But you could do better with an actual virtual server configuration. As a full proxy, the F5 will always proxy layer 4 (TCP and UDP), but beyond that layers 5 and up are controlled by profiles that either manage the traffic or simply pass them through. A simple virtual server listening on port 5060 or 5061, with nothing more than a pool assigned also pointing to port 5060 or 5061 backend services will not terminate or touch the SIP traffic passing through it.