For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Jun 22, 2018

SNAT local address going to a specific port

I'm trying to SNAT a subnet going to a specific port but not getting anywhere with the iRule. Below is what I currently have:

 

when CLIENT_ACCEPTED { if {[IP::addr [IP::client_addr] equals "10.10.10.0/28"]} and {[UDP::local_port] equals "1700"]} {snat "10.10.10.1"}}

 

application delivery
BIG-IP
iRules

1 Reply

  • crodriguez's avatar
    crodriguez
    Ret. Employee
    Jun 22, 2018

    Braces and brackets are a bit misaligned. Try the following which should at least be syntactically correct:

    when CLIENT_ACCEPTED {
    if { [IP::addr [IP::client_addr] equals "10.10.10.0/28"] && [UDP::local_port] equals "1700" } {
        snat "10.10.10.1"
    }
}