Forum Discussion
Donald_William1
Nimbostratus
Dec 02, 2005Selective SNAT based on Data Group
I have two 6400s (active/standby) running 9.1 load balancing two ftp servers. I need to selectively SNAT the source based on a data group. The data group has a list of networks that I want to SNAT for. Everything else I don't want to SNAT. I have not been able to find an example of this. Can someone help?
This is what I have slapped together.
class dg_SRCNets {
network 10.0.0.0 mask 255.0.0.0
network 192.168.0.0 mask 255.255.255.0
}
when CLIENT_ACCEPTED {
if {[matchclass[IP::client_addr] eq $::dg_SRCNets]} {
snat automap}
else {
snat none}
}
I have no idea if this is correct...
- unRuleY_95363Historic F5 AccountYup, that's pretty much what you need.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects