Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Type11_8030's avatar
Type11_8030
Icon for Nimbostratus rankNimbostratus
Jul 29, 2009

SNAT Fun

I think I have a unique situation and not sure how to get around it.     this will be a tough one to explain but I will give it a go.     We have clients that for security requir...
config
design
Type11_8030's avatar
Type11_8030
Icon for Nimbostratus rankNimbostratus
Jul 29, 2009
I just read this and confused myself a bit so here is the basics

 

 

I have two machines and want them to look like 2 different VIPS when they do outgoing connections. If to internal traffic 10.7.25.xxx traffic in this case I want them to look like VIP 2. If to external traffic like 82.23.23.23 I want them to look like VIP1.

 

 

I have my 10.7.25.xxx network on my vlan tagged internal. I have my public ip on the vlan tagged external. On my SNAT rules for VIP2 I told it internal vlan only and on SNAT rule for VIP1 I told it external VLAN only.

 

 

However on the public ip client I see the VIP2 address. Maybe this helps...