For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anthony_Pineda's avatar
Anthony_Pineda
Icon for Nimbostratus rankNimbostratus
Nov 20, 2014

SNAT automap

A colleague of mine has created a SNAT below ltm snat def-automap { automap origins { 0.0.0.0/0 { } } } He says that is all that is needed in order to ensure that all the virtual ...
application delivery
deployment
LTM
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Feb 10, 2015

Hi,

 

Am I wrong that it will open LTM to any traffic directed to any of self IP's? If SNAT object with Automap and All Address is set and All Vlans as well selected then it will be possible to reach any servers in internal from external and vice versa? For example any computer in internal wit DG set to internal VLAN selfIP will be able to reach servers in external vlan, and any computer in external with DG set to external selfIP can reach servers in internal. DG is even not necessary to be set to selfIPs if static route will be created on computer. At least that is result of test I did today. So SNAT object by itself will be routing traffic via LTM even when there is no VS defined.

 

Piotr