For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

opers13_3280's avatar
opers13_3280
Icon for Nimbostratus rankNimbostratus
Oct 01, 2009

SNAT / SNAT pool question

Today I have a SNAT list which is the IP of the external VLAN floating address (10.153.60.10)

 

 

I was asked to create a new virtual server and to add a SNAT pool. Now, the SNAT pool has the same IP as the virtual server (10.153.60.20).

 

 

Does it mean that all requests to v. server 10.153.60.20 will be NAT'd to the SNAT pool which is the v.server's IP?? and not 10.153.60.10 which is the SNAT list?

 

 

thanks in advance!
config
design

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 01, 2009
    Yes. The VIP's SNAT definition has the highest precedence in that scenario.

     

     

    Are the servers on the external VLAN? If not, have you considered using SNAT addresses on the VLAN the servers are on? This eliminates the need for configuring routing on the servers.

     

     

    Aaron