Forum Discussion
Roman_80473
Nimbostratus
Apr 25, 2011set SNAT Pool to "AutoMap" with iControl?
Hi folks,
I'm using iControl from java trying to create a simple, standard virtual server. Everything works fine except for the SNAT Pool being set to "None" which prevens web traffic flow. Is there a way to set SNAT Pool to "AutoMap" with iControl? I can't seem to find the correct method call
Any help is appreciated.
Thank you, Roman
4 Replies
- George_Watkins_Historic F5 AccountHi Roman,
I think what you're bumping up against here is the difference between a SNAT and a SNAT pool. A SNAT pool is a group of IP addresses that map to source addresses for packets egressing the BIG-IP. A SNAT can map to a single IP, a SNAT pool, or be automapped to a self-IP on the egress interface. I think you'll want to create a SNAT with automap through the LocalLB::SNAT interface (http://devcentral.f5.com/wiki/default.aspx/iControl/LocalLB__SNAT__create.html).
Hope this helps,
George - Roman_80473
Nimbostratus
Hi George,
Thanks for reply. I'm a bit unclear between SNAT Pool for the virtual server vs SNAT for the actual pool. Since I have SNAT set to Yes for default pool, I thought all incoming requests will automatically be routed to ip members.
I'll check the LocalLB::SNAT.
Roman - George_Watkins_Historic F5 AccountHi Roman,
The "Allow SNAT" and "Allow NAT" options for the pool control whether a SNAT or NAT rule under Local Traffic > SNATs (or NATs) should be applied to pool member connections. The virtual server "SNAT pool" option controls whether packets destined for a pool member should be automapped to a self-IP, SNAT'd to a SNAT pool address, or left alone (the "none" option). I personally don't mess with the "Allow SNAT" and "Allow NAT" options very often.
-George - Roman_80473
Nimbostratus
George,
I think I got it, thank you for your help
Roman
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
