Forum Discussion

Maxim_Taskov_90's avatar
Maxim_Taskov_90
Icon for Nimbostratus rankNimbostratus
Jun 05, 2008

SNAT Based on Source and Destination

I hope you can help ... thanks.     I am trying to apply conditional SNAT based on source and destination for any service otherwise leave them alone and allow the static NAT to take effect....
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 05, 2008
The VIP is showing disabled in your config snippet--I assume it was enabled when you were testing? Also, the IP::client_addr and IP::local_addr commands need to be enclosed in square braces in order to be executed. I would think that the conditional should have failed and no SNAT would have been used.

Can you retest with the VIP enabled and the commands bracketed? 

  
  when CLIENT_ACCEPTED {  
     if {[matchclass [IP::local_addr] equals $::the_destination_ip] and [matchclass [IP::client_addr] equals $::the_source_ip]} {  
        log local0. "[IP::client_addr]: using SNAT for [IP::local_addr]" 
        snat 10.10.1.1  
     } else {  
        log local0. "[IP::client_addr]: not using SNAT for [IP::local_addr]"  
        snat none  
     }  
  }

Aaron