For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Dec 22, 2017

SNAT not working

I've been working on this issue all day - I'm using a virtual device as a passthrough between the internal network and DMZ. I need to NAT a subnet in the 10.X.X.X space when going to the internet and...
application delivery
BIG-IP
LTM
nitass's avatar
nitass
Icon for Employee rankEmployee
Dec 22, 2017

No virtual server configured. This is a subnet with servers behind it that needs to call the internet for service patches that I need to NAT while going outbound but remain native when I'm inside my RFC1918.

 

okay, what about creating snat list to snat outbound traffic and rfc1918 network virtual server with snat disabled for traffic destined to rfc1918 subnet?

 

"SNAT objects take effect on all traffic through a system, even a virtual server, unless that traffic is already subjected to SNATs by the virtual server"

 

K9038: The order of precedence for local traffic object listeners

 

https://support.f5.com/csp/article/K9038