For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_M's avatar
David_M
Icon for Cirrostratus rankCirrostratus
Aug 28, 2019

RDP with Forwarding VIP and DNAT

Hi Guys,   Trying this lab out in my lab but it just fails.       With this NAT rule.       Is this the right way to use NAT.   The user with hit the 10.1.61...
LTM
security
rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Aug 29, 2019

In BIG-IP LTM, Virtual Servers and NATs are listeners, and only one can handle a specific connection.

 

Why not use a standard virtual server, which does destination address by default, with your RDG as the only member of the pool?

 

If you really need to do DNAT, you could use an iRule or AFM NAT rules to make the transformation.

David_M's avatar
David_M
Icon for Cirrostratus rankCirrostratus
Aug 29, 2019

Actually I just want to try how this NAT works, this is just for study.

 

So if NATs are listeners how will we make sure the traffic hits the NAT on the BIGIP?

 

Just configure the NAT and not the VS?

 

Will that just itself just pass the traffic to the RDP server after NAT and we dont even need the forwarding VIP for it?