For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JohnQuintas_910's avatar
JohnQuintas_910
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

SNAT outbound connections from pool members to virtual server IP for a specific outbound port

I have a virtual server for inbound ftp connections Virtual server: 1.1.1.1:21, using the standard FTP profile and source_addr persistence, 30 min timeout Pool Members: 10.0.0.10:21 10.0.0.11:...
application delivery
LTM
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Oct 16, 2015

Think you will need an iRule like this to identify the client IP and tcp port for each outbound connection:

when CLIENT_ACCEPTED {
    if { [TCP::local_port] == 21] || [TCP::local_port] == 22] }{
        if { [IP::addr [IP::client_addr] equals 10.0.0.10] {
            snat 172.18.1.1
        } elseif { [IP::addr [IP::client_addr] equals 10.0.0.11] }{
            snat 172.18.1.1
        }
    }
}