Forum Discussion

gates2010_31680's avatar
gates2010_31680
Icon for Nimbostratus rankNimbostratus
Apr 04, 2011

Request originating from servers behind the F5, not utilizing the ingress VIP

Hello,

 

 

I have a F5 and two servers sitting beside it.

 

When the requests originate from an external server the F5 does the necessary replacement of IP's in the response.

 

But when the requests originate from behind the F5, the F5 is not resplacing the IP address of source with the F5 IP address in the request to the destiantion server.

 

 

This is how it currently going:

 

server 1 sitting behind the F5 (source: IP of server1, dest: IP of dest serverX) -> F5 egress -> F5 ingress (source: IP of server1, dest: IP of dest serverX -> Dest server.

 

 

What I want:

 

server 1 sitting behind the F5 (source: IP of server1, dest: IP of dest serverX) -> F5 egress -> F5 ingress (source: IP of F5 ingress, dest: IP of dest serverX -> Dest server.

 

 

 

How can I achieve this?

 

 

Thank you.

 

config
design
  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2011
    The most flexible way is to use a forwarding virtual server: 0.0.0.0, all protocols. Bind it to your server-facing vlan, and point it to a pool with your gateway address (the next hop up from the BigIP). Use snat automap or setup a snat pool with the appropriate addresses in it (the ingress IP that you specify above). Have a look here for more information:

     

    http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementation/sol_route_pf.html1062640

     

     

    HTH,

     

    -Matt