Forum Discussion
Kim_Kipp_49723
Nimbostratus
Sep 18, 2013SNAT by Destination IP
I want to mask a network behind an SNAT IP address based on the following criteria: either the leaving interface (WAN) or the desitination IP. Is there a way to solve that by configuration utility? O...
Kim_Kipp_49723
Nimbostratus
Sep 18, 2013Tried this already, but it doesn't work. when logging the value [IP::remote_addr] it's showing the client IP, same as [IP::client_addr]. This is very strange to me. Cross-checked it twice... Log example: "client 192.168.10.30 remote 192.168.10.30 SNAT yes" Might this happen because of the wildcard virtual server?
- JRahmSep 18, 2013
Admin
IP::remote_addr is a context sensitive command and depends on whether you use it in a clientside or serverside event. On the clientside events, IP::remote_addr will be the client address, on the serverside, it will be the server address. IP::local_addr is also context sensitive and will be the virtual server on the clientside and the self or snat on the serverside (unless you are doing some vip targeting vip configuration, and then it could be an internal address). IP::client_addr on the otherhand, will always be the client IP regardless of context. - What_Lies_Bene1Sep 18, 2013
Cirrostratus
Doh! Updating the post now - always gets me.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects