For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Aug 23, 2007

Selective SNAT setup

Thanks for reading, any help would be appreciated. Here is my setup     US based LTM in DMZ     pool AMK_US   member 192.168.x.x (behind the local LTM)   member 192.55.x.x (on a ...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Aug 23, 2007
I think the concern was that only those requests that arrive on the internal_5 vlan would be snatted, but I couldn't quite tell. I was trying to get LINK::vlan_id to return something, but haven't been able to on my lab pair (9.4.2 beta) I was thinking of setting a variable in the CLIENT_ACCEPTED event with the link vlan ID so it could be ANDed with the remote server IP before snatting, but I've never used that before and wanted to test prior to posting.