For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Dec 22, 2017

SNAT not working

I've been working on this issue all day - I'm using a virtual device as a passthrough between the internal network and DMZ. I need to NAT a subnet in the 10.X.X.X space when going to the internet and...
application delivery
BIG-IP
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Dec 22, 2017

Next time you ask a question, post formatted code. Here is the formatted configuration :

 

ltm snat-translation 20.15.30.98 {
    address 20.15.30.98
    inherited-traffic-group true
    partition DMZ
    traffic-group /Common/traffic-group-1
}
ltm virtual ip-forwarding {
    destination 10.22.32.0%1:any
    ip-forward
    mask 255.255.224.0
    partition DMZ
    profiles { /Common/fastL4 { } }
    source 10.22.12.0/24
    translate-address disabled
    translate-port disabled
    vlans { vlan12-dmz vlan120-dmz }
    vlans-enabled
    vs-index 25
}
ltm virtual ip-forwarding-default {
    destination 0.0.0.0%1:any
    ip-forward
    mask any
    partition DMZ
    profiles { /Common/fastL4 { } }
    source 10.22.12.0/24
    translate-address disabled
    translate-port disabled
    vlans { vlan12-dmz vlan4-dmz-ext }
    vlans-enabled
    vs-index 26
}

net route route_10.22.32.0_19 {
    gw 10.22.120.1 network 10.22.32.0/19 partition DMZ
}

net route default-route {
    gw 20.15.30.97 network default partition DMZ
}