For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Maxim_Taskov_90's avatar
Maxim_Taskov_90
Icon for Nimbostratus rankNimbostratus
Jun 05, 2008

SNAT Based on Source and Destination

I hope you can help ... thanks.     I am trying to apply conditional SNAT based on source and destination for any service otherwise leave them alone and allow the static NAT to take effect....
application delivery
dev
devops
iRules
Maxim_Taskov_90's avatar
Maxim_Taskov_90
Icon for Nimbostratus rankNimbostratus
Jun 05, 2008
Thanks for the reply Aaron.

 

 

You are correct, the VS was enabled when I was testing.

 

 

I re-enabled the VS and tried your rule but no luck ... most outbound traffic still failed.

 

 

I got the following error message when your rule tried to compile:

 

 

01070394:3: TCP::client_port in rule (snat_rule) requires an associated TCP profile on the virtual server (vsANY-NodeNet). I can't really assign a TCP profile on a Forwarding (IP) VS, can I?

 

 

Therefore, for this test I just cut the [TCP::client_port] portion of the log statement.

 

 

I also could not find where the logged the "[IP::client_addr]:using SNAT" result.

 

 

Thanks for your help. Do you have any other suggestions?

 

 

Cheers ...