Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Thiyagu_343098's avatar
Thiyagu_343098
Icon for Nimbostratus rankNimbostratus
7 years ago

query on static NAT

Hi, we have design like the traffic from the client to LB is not getting SNAT so the source IP will be preserverd all the way to the application servers.   As far as the reverse traffic is concern...
application delivery
big-ip
LTM
AlanTen's avatar
AlanTen
Icon for Altostratus rankAltostratus
7 years ago

If you're not using SNAT and are preserving the client's real IP address all the way to the application servers then you will need to ensure that either you use the F5 VIP as the default gateway for the application servers or a network design/routing that will ensure that the return path traffic goes back to the F5.

 

Associating NAT to the VIP will ensure that the traffic returns via the F5 and is applied by using "Source Address Translation : AutoMAP" or "Source Address Translation : SNAT : user defined SNAT pool".