Forum Discussion

stuart_weinstei's avatar
Icon for Nimbostratus rankNimbostratus
Jan 10, 2012

resources on same VLAN

As I am new to F5 LTM, have ACE and CSS experience, I am in need of some guidance on the best way to handle the flow of traffic as follows



Nodes in the pool are in VLAN X, web services, that need to access DB server in the same VLAN X.




As I understand it, assuming I am, I could do a snat using the IP of the VIP or an Irule if i have it right)






if { [IP::addr [IP::client_addr] equals x.x.x.x/bit mask }{


snat automap









Is the above correct? is there a better way?




Thanks in advance


2 Replies

  • Hi Stuart,



    If all clients are on the same subnet as the servers being load balanced, you could just enable SNAT on the virtual server (either automap or an explicit pool) without using an iRule. Else, you could use that iRule if you only want to apply SNAT for a specific subnet(s). Here's an option for using SNAT only when the client and server are on the same subnet:





  • Colin_Walker_12's avatar
    Historic F5 Account
    Aaron's right, you don't need an iRule for this and would likely be better served without one. But just in case you try your iRule, you're missing a bracket 😉

      if { [IP::addr [IP::client_addr] equals x.x.x.x/bit mask] }{ 
        snat automap

    Colin (The pedantic coder)