Forum Discussion

shailendra_8188's avatar
shailendra_8188
Icon for Nimbostratus rankNimbostratus
Jan 30, 2012

SNAT access is Port specific?

Hi Guys,

 

 

Need some clarification as not sure. Does SNAT is port specific or it allows outbound access on all ports. Hv Server configured under SNAT requires a SSH access to external Server, Does require any specific config or it should work with the default SNAT config?

 

 

-Shailendra
config
design
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jan 30, 2012
    Does require any specific config or it should work with the default SNAT config?it should work. there is no port setting when configuring snat (except combination with irule).
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jan 30, 2012
    Hi shailendra,

     

     

    You could use a SNAT for outbound traffic. By default it would allow any allowed client (or any client on an allowed VLAN) to originate traffic through the SNAT to any destination host or port.

     

     

    However, I think it's more functional to use a wildcard virtual server enabled on specific VLANs that you want to allow traffic from with SNAT enabled. With a virtual server you also have the ability to use an iRule to add more logic on restricting which clients, ports or destinations can use the virtual.

     

     

    Aaron