Forum Discussion

Cleo1's avatar
Cleo1
Icon for Altostratus rankAltostratus
Apr 15, 2019

Regarding SNAT IP

Hi,

 

Since I am new to F5, can anyone tell me how can I find SNAT IP assigned to which VIP. We have multiple VIP's on our F5, and it can take more time to check. Is there any easy way to find out?

 

Thanks in advance

 

  • Hi

    you can list the individual SNAT settings of your Virtual Servers via CLI...

    [root@f501:Active:Standalone] /  tmsh list ltm virtual source-address-translation { type pool }
    ltm virtual Test {
        source-address-translation {
            pool none
            type automap
        }
    }
    

    Cheers, Kai

  • Hello, So basically you can configure SNAT in following ways. SNAT none : This will not NAT the source IP address, servers will see actually source IP address. SNAT Automap : The SNAT Automap feature selects a translation address from the self IP address in the order below. You can know the self ip by simply using the command tmsh list net self | grep "starting two to three octet of the IP eg. tmsh list net self | grep 10.224.25

     

    Floating self IP addresses of egress VLAN Floating self IP addresses of different VLANs Non-floating self IP addresses of the egress VLAN Non-floating self IP addresses of different VLANs SNAT pool : Here you will define the IP address in the SNAT pool that needs to be used to NAT the source IP address. To know which SNAT pool is configured, you can use below command and then you can use the below command to know the IP address.

     

    tmsh list ltm virtual Test source-address-translation { type pool } ltm virtual Test { source-address-translation { pool snatpool_1 type snat pool } }

     

    tmsh list ltm snatpool snatpool_1