Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Dec 22, 2017

SNAT not working

I've been working on this issue all day - I'm using a virtual device as a passthrough between the internal network and DMZ. I need to NAT a subnet in the 10.X.X.X space when going to the internet and...
application delivery
BIG-IP
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Dec 22, 2017

Next time you ask a question, post formatted code. Here is the formatted configuration :

 

ltm snat-translation 20.15.30.98 {
    address 20.15.30.98
    inherited-traffic-group true
    partition DMZ
    traffic-group /Common/traffic-group-1
}
ltm virtual ip-forwarding {
    destination 10.22.32.0%1:any
    ip-forward
    mask 255.255.224.0
    partition DMZ
    profiles { /Common/fastL4 { } }
    source 10.22.12.0/24
    translate-address disabled
    translate-port disabled
    vlans { vlan12-dmz vlan120-dmz }
    vlans-enabled
    vs-index 25
}
ltm virtual ip-forwarding-default {
    destination 0.0.0.0%1:any
    ip-forward
    mask any
    partition DMZ
    profiles { /Common/fastL4 { } }
    source 10.22.12.0/24
    translate-address disabled
    translate-port disabled
    vlans { vlan12-dmz vlan4-dmz-ext }
    vlans-enabled
    vs-index 26
}

net route route_10.22.32.0_19 {
    gw 10.22.120.1 network 10.22.32.0/19 partition DMZ
}

net route default-route {
    gw 20.15.30.97 network default partition DMZ
}