For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pzamberlan_2615's avatar
Pzamberlan_2615
Icon for Nimbostratus rankNimbostratus
Jul 06, 2018

Problems with outgoing connections

Hello everyone   I need a pool of servers to make outbound connections with a Snat and a different route than the default route of the BIG-IP. They have some recommendation or good practices to do...
AFM
application delivery
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jul 09, 2018

Hi Pzamberlan,

 

you have to respect this requirement:

 

  • the Default Gw of your server have to be F5 (floating IP if cluster or serlf IP if standalone).

  • Create an VS (L4) with this vs IP: 0.0.0.0:443 or 0.0.0.0:* if you need more port (you can also create multiple vs depending port you need).

     

  • In the VS settings you have to uncheck "Port Translation" and "address ranslation".

     

  • set snat to automap.
  • create your pool memeber (it will be the F5 Gw) in the port set at wildcard (IP_GW:*).

If you want to monitor your GW (pool memeber) you have to create it as transparent. but for the momenet don't set any monitor until you validate your oubtound service.

 

Keep me in touch.

 

Regards