Forum Discussion

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
May 09, 2019

SNAT for outbound connections from members to internet and intranet

Any one confirm please , below irule will give me this solution? SNAT for outbound connections from members to internet and intranet members IP range: 172.0.0.0 single vip with IP 192.0.0.5 So m...
application delivery
devops
iRules
LTM
  • hooleylist's avatar
    hooleylist
    May 19, 2019

    Hi Ironman,

     

    You could create a forwarding virtual server with a destination IP:port of 0.0.0.0:0 with a source of 172.0.0.0/8 enabled on the VLAN that the clients are connecting into the BIG-IP on. You could enable your SNAT pool on the virtual server.

     

    This should work without an iRule.

     

    Aaron

hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus

Hi Ironman,

 

You could create a forwarding virtual server with a destination IP:port of 0.0.0.0:0 with a source of 172.0.0.0/8 enabled on the VLAN that the clients are connecting into the BIG-IP on. You could enable your SNAT pool on the virtual server.

 

This should work without an iRule.

 

Aaron

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
Jun 14, 2019

Thanks,

 

Should i add VLAN of external, that connecting to upstream? or Server VLAN?

SNAT i can apply server IP? is it possible? because client need to server IP, that connection coming from?