Forum Discussion

jschilen's avatar
jschilen
Icon for Nimbostratus rankNimbostratus
Mar 05, 2007

Recreat Bigip 4.5 behavior in BIGIP-LTP 9.2.3

Hello,

 

 

I'm trying to recreate the behavior of the BIGIP version 4 snat translation in my BIGIP version 9.2.3 system. Here's the basic scenario but it will need to be generalized across all my vips(the names and ips have been changed for security purposes):

 

The bigip has 2 vlans, one is a public routable address space (well call it 169.69.21.x), the other is a private address space reserved for load balanced servers (192.168.2.x for this example).The bigip interfaces have the following ip addresses 169.69.21.2 and 192.168.2.2

 

 

In the old bigip I have two vips ldap.test.com (169.69.21.5:389) and application.test.com (169.69.21.6:80)

 

ldap.test.com has a pool named ldap with server 192.168.2.112:389 and a snat map { 192.168.2.112 to 169.69.21.5}

 

application.test.com has a pool named app with server 192.168.2.135:80 and a snat map { 192.168.2.135 to 169.69.21.6}

 

Both servers are linux servers with their default gateways set to the 192.168.2.2 address of the bigip.

 

 

The following works in the old bigip but I can't get it to work in the new.

 

Server 192.168.2.135 sends out an ldap look-up to 169.69.21.5. The bigip gives this request to 192.168.2.112 which sees the request as if it came from 169.69.21.6, then responds to the lookup request and everything is happy.

 

 

Essentially this is what I want:

 

192.168.2.135 sends ldap request ---> 169.69.21.5 bigip sends to ---> 192.168.2.112 sends ldap response ---> 169.69.21.6 ---> 192.168.2.135

 

 

I've setup snat translation for both vips in the new bigip but that only seems to work on packets that leave the bigip completely. Does anyone have a suggestion for how to make this happen? Support told me I would need to use an iRUle and snatpools but I haven't been able to get that method to work either.

 

 

Jeremiah

 

 

  • I apologize for the spelling errors in the subject, I was trying to do too many things at once. The subject should read:

     

     

    Recreating Bigip 4.5 behavior in Bigip-LTM version 9.2.3