Forum Discussion

A__N_5261's avatar
A__N_5261
Icon for Nimbostratus rankNimbostratus
Dec 13, 2012

SNAT for Specific Subnet

Hi ,     we have 5 VIP we have enable Snat on pool member. can we enable SNAT in this way if traffic coming from 10.0.0.0/8 subnet. Snat should work otherwise not. is there any way with ...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Dec 13, 2012
An SNAT is specified at the Virtual Server level, not the Pool or Member level. An iRule would be your best bet, something like this; 


when CLIENT_ACCEPTED {
 if { [IP::addr [IP::client_addr] equals 10.0.0.0/8] } {
  Use SNAT Automap if client IP is in this range
  snat automap
  Alternatively, specify a SNAT Pool instead
  snatpool name
  Stop processing the iRule for this event
  return
  }
 else {
  Stop processing the iRule for this event if no match
  return
  }
}