For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Feb 22, 2005

SNAT by VIP, not source

I have several pools of terminal servers behind the BigIP, but the BigIP is not the default gateway, so I need to translate the source. Currently, I'm using automap, but I would like to assign a snat to each vip. I'm not sure if I need rules to do this or not, but I couldn't get it to work with just snat configuration. For example, if I have vip 10.1.1.1 serving a pool of servers on 10.10.10.0/24, I'd like the source translation address to be 10.10.10.1, not the real on that subnet. Any direction would be appreciated.

4 Replies

  • Windows. I'm guessing the rule would need to look similar to this?

     

     

    iRule vip1_snat_assignment {

     

    when CLIENT_ACCEPTED {

     

    use snat 10.10.10.1

     

    }

     

    }
  • I don't think you need a rule. Create a SNAT address 10.10.10.1 in the networking section of the GUI. Then on the advanced properties of the VIP, select that SNAT.

     

     

    Cheers,

     

    Brian
  • The BigIP wouldn't let me create a second snat in the same vlan with the same source network (0.0.0.0/0), but I could create a single member snat pool and map this to each vip. That's great! Thanks.