Forum Discussion
Josh_41258
Nimbostratus
NimbostratusRouted VS SNAT Deployment
Typically, we always use SNAT in our environment. I have a scenario now where I need to retain source IPs from clients thus disabling SNAT.
Here is what I have configured thus far:
1) Crea...
nitass
Employee
Employee15:59:51.130145 IP fc-rodns01.corp.domain.com.57417 > buildel564.corp.domain.com.ssh: Flags [S], seq 2672739120, win 14600, options [mss 1460,sackOK,TS val 3568921727 ecr 0,nop,wscale 7], length 0
15:59:52.129598 IP fc-rodns01.corp.domain.com.57417 > buildel564.corp.domain.com.ssh: Flags [S], seq 2672739120, win 14600, options [mss 1460,sackOK,TS val 3568922727 ecr 0,nop,wscale 7], length 0
i think the 2nd packet may be the one from bigip to server. if i am correct, the problem could be routing on server. in tcpdump, you may include "-e" to show mac address.
JRahm
Admin
Admina full second to pass through the BIG-IP? Looks like a second SYN attempt to me.
