For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mr_evil_116524's avatar
mr_evil_116524
Icon for Nimbostratus rankNimbostratus
Sep 20, 2013

Question about vLAN isolation iRule

I have a simple iRule as follows:   when CLIENT_ACCEPTED { if { [IP::addr [IP::local_addr] equals x.x.x.x/xx] }{   Uncomment the line below to turn on logging. log local0...
application delivery
devops
iRules
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Sep 23, 2013

Can you prove by tcpdump the ICMP is passed through to the other VLAN?

 

Is it SNATed? Depending on S/W version there may be different behaviour for so called default SNATs.

 

Personally I try to avoid them and to use SNATpools or SNAT AutoMap in combination with virtual server configuration. What S/W version are you running?