For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rakesh_125911's avatar
Rakesh_125911
Icon for Nimbostratus rankNimbostratus
Jun 11, 2013

Retain Original Source IP address of Clients

  To Retain Original Source IP address of Clients connecting to Exchange 2010 Virtual server for smtp .Virtual server ip and pool member ip's are in different subnet,SNAT is enabled.Exchange tea...
basic
getting started
new to f5
fubarSUSHI's avatar
fubarSUSHI
Icon for Altocumulus rankAltocumulus
Oct 28, 2013

I utilize a iRule snat for our exchange environment. They have asked us for the same need to insure seeing the true source mac/IPs.

when CLIENT_ACCEPTED {
 if { [matchclass [IP::client_addr] equals datagroup_Hosts]} {
 snatpool snatpool_SNAT
 }
}

datagroup_Hosts = the network segment of the pool members.

snatpool_SNAT = is the snat pool IP. I use the same segment from our VIP/VS segment.

*edited for formatting.
boneyard's avatar
boneyard
Icon for MVP rankMVP
Oct 29, 2013
i hope you don't expect to see the actual client MAC / IP, you might be able to relate things but the actual information is lost. client MAC is lost the moment the packet hits the first router anyway.