For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Souravpcs_14061's avatar
Souravpcs_14061
Icon for Nimbostratus rankNimbostratus
Mar 13, 2014

Snat Issue

Hi Guys,   I have an issue in translating the Client Source address to internal node IP Subnet in the F5. Could you please provide some clear idea on how snat works.   Regards  
application delivery
devops
iRules
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 13, 2014

Seems like you made a re-post, but I'll repeat my answer here as well:

 

There are multiple ways of translating IP's. If all you want is to translate incoming client source IP's on a particular virtual server I'd recommend using a SNAT pool.

 

To use a SNAT pool on a virtual server:

 

Go to the virtual server config page. Change Source Address Translation from "None" to automap, or a custom SNAT Pool that you've create yourself. Note that if you create a SNAT pool yourself it should contain at least one IP in the subnet facing the member servers.

 

/Patrik