For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Oct 10, 2005

Selective SNAT rule

Hi all,   I am new to iRules and just implemented my first one today to resolve a problem we've been seeing with NAT. However, I need to create another one and I need to know the correct syntax to...
application delivery
dev
devops
iRules
Eric_Van_Tol_10's avatar
Eric_Van_Tol_10
Icon for Nimbostratus rankNimbostratus
Oct 13, 2005
Okay, here's what I've got:

virtual test_snat {
   destination 192.0.2.10:smtp
   ip protocol tcp
   profile fastL4
   pool test_snat
   rule disable_snat
}
pool test_snat {
   monitor all tcp
   member 172.19.10.11:smtp
   member 192.0.2.25:smtp
}

1. snat is enabled on the VIP and on the pool.

2. I'm using no persistence.

3. What's the difference between a backend server and a backend node?

4. I'll try this.

5. The reselect is necessary if it is required to disable snat for only certain nodes in a pool.

Just to reiterate, I have a remote 'dummy' VIP set up on a remote BIGIP which is load balanced among three servers that are local to that remote BIGIP. I only need snat to occur on the 192.0.2.25 node, as it's in a remote location, on a different IP subnet.