For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

EIT_Network's avatar
EIT_Network
Icon for Altostratus rankAltostratus
Feb 07, 2019

SNAT-AutoMap , IP Enforcer & AXR

Hi All,   Would like to have clarity of "Source Address Translation" Option Under VS in LTM. While drop down there are 03 available options. 1- SNAT , 2-AutoMap , 3- None. What are specific imp...
application delivery
LTM
Dylan_375544's avatar
Dylan_375544
Icon for Cirrocumulus rankCirrocumulus
Feb 07, 2019

Well, for SNAT:

 

Automap basically means that the system will translate the source address from the clients original address to a floating IP on the BIG-IP. It will pick a floating IP over a non floating one even if the non floating one is in the correct subnet, so make sure you have a floating in the correct subnet to reach your backend servers.

 

SNAT without automap basically means that the system will SNAT to a POOL of IP addresses that you have configured.

 

NONE means that the system will not translate the clients source IP address. That can cause asynchronous routing if the BIG-IP is not the default gateway for your backend servers.

 

Hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!

 

-Dylan

 

Stephane_Viau's avatar
Stephane_Viau
Icon for Nimbostratus rankNimbostratus
Feb 07, 2019

Did you inherit a few old boxes and are wondering what to do with them? :)

 

IP Enforcer was part of ASM back in firmware 10.x, and the ARX (I assume by AXR you meant ARX) product line, which was used to proxy/load balance file servers, has been discontinued a while ago.