For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bkanna_133485's avatar
bkanna_133485
Apr 10, 2014

SNAT Configuration on F5

We have 2 servers in DMZ which are the pool members of the F5 VIP. These servers need internet access and servers default gateway is pointing to the F5 self IP. Can we configure the SNAT to allow the...
application delivery
deployment
LTM
security
Austin_Geraci's avatar
Austin_Geraci
Icon for MVP rankMVP
Apr 10, 2014

As Cory suggested, I've traditionally used Forwarding VSs to accomplish what you're looking for.. Use SNAT, or you can let your firewall handle the translation.. Just remember, either way you have to make sure any devices in front of the LTM knows how to route back to the source address of the connection.. Read through the referenced doc, it's pretty good.

 

Be careful with what Vincent is recommending above - it may work in some cases, but can break things in some configurations.. For example - if you have any In-Line traffic you can end up with asymmetric routing and break connections..