Forum Discussion

RKnudson_131750's avatar
RKnudson_131750
Icon for Nimbostratus rankNimbostratus
Oct 10, 2013

SNAT I rule

I have a irule that will read the assigned VIP and assign the same 4th octect to the SNAT address. when CLIENT_ACCEPTED { scan [IP::local_addr] "%d.%d.%*d.%d" lastoctet snat 10.1.91.$lastocte...
application delivery
deployment
devops
iRules
RKnudson_131750's avatar
RKnudson_131750
Icon for Nimbostratus rankNimbostratus
Oct 10, 2013

Thanks I think you are correct as well, trying to get a test network setup for this now. Thnaks for the reply

 

  • RKnudson_131750's avatar
    RKnudson_131750
    Icon for Nimbostratus rankNimbostratus
    Oct 29, 2014
    OK revisit of this post from last year. I have this iRule in production and what I am learning is that the SNAT will use every address in the SNAT pool instead of just matching the 4th octect and sticking with it. the iRule is when CLIENT_ACCEPTED { scan [IP::local_addr] "%*d.%*d.%*d.%d" lastoctet snat 10.1.91.$lastoctet} and the SNAT pool has all addresses for the 10.1.91.0/24 network. It appears that it will roll through the snatpool for each new connection. I would like to apply an iRule to any VIP and have it match the 4th octect of the VIP for all traffic that hits that VIP. If I am not being clear let me know but I would like to resolve this to work as desired