For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ron_Kim_110696's avatar
Ron_Kim_110696
Icon for Nimbostratus rankNimbostratus
Mar 23, 2007

Selective SNAT based on server network

I'm trying to do a selective SNAT based on where the servers are located.   The BIGIP has multiple network connections.     This iRule does not work.   Any suggestions?     I have...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 26, 2007
Here's an example of matching single hosts. This has not been tested, but passes the syntax checker on version 9.1.2.


class snat_map {
  "192.168.168.10 dmz192.168.68_SNAT"
  "192.168.170.10 dmz192.168.70_SNAT"
}
when LB_SELECTED {
   set local_subnet_snat [findclass [LB::server addr] $::snat_map " "]
  if { $local_subnet_snat ne "" } {
    snatpool $local_subnet_snat
  }
}