Forum Discussion

Ilian_Ivanov's avatar
Ilian_Ivanov
Icon for Nimbostratus rankNimbostratus
Jun 02, 2017

Selective SNAT

Hello,

I have a VIP on port 53, all-protocols, fastL4 profile, snat none. The VIP is working OK, but I want to do snat for a specific network. I have tried with that iRule:

when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals 10.10.10.64/26] } {
    snat 10.10.10.65
    }
    }

But for some reason the snat is not working...

The software is 10.2.4 HF7 and I have multiple route domains. Any suggestions?

application delivery
iRules
LTM
selective snat
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jun 02, 2017

    Hi,

     

    Is the IP address 10.10.10.65 configured on the BigIP (SNAT translation list or VS)? if not, there is no ARP proxy enabled on the BigIP and the return packet from the server will not go to BigIP.