For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JohnQuintas_910's avatar
JohnQuintas_910
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

SNAT outbound connections from pool members to virtual server IP for a specific outbound port

I have a virtual server for inbound ftp connections Virtual server: 1.1.1.1:21, using the standard FTP profile and source_addr persistence, 30 min timeout Pool Members: 10.0.0.10:21 10.0.0.11:...
application delivery
LTM
JohnQuintas_910's avatar
JohnQuintas_910
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015

Does this syntax look correct? I have a few more pairs of IPs that need SNATs...

when CLIENT_ACCEPTED {

if { [TCP::local_port] == 21] || [TCP::local_port] == 22] }{
    if { [IP::addr [IP::client_addr] equals 10.0.0.10] }{
        snat 172.18.1.1
    } elseif { [IP::addr [IP::client_addr] equals 10.0.0.11] }{
        snat 172.18.1.1
    } elseif { [IP::addr [IP::client_addr] equals 10.0.0.12] }{
        snat 172.18.1.2
    } elseif { [IP::addr [IP::client_addr] equals 10.0.0.13] }{
        snat 172.18.1.2
    } elseif { [IP::addr [IP::client_addr] equals 10.0.0.14] }{
        snat 172.18.1.3
    } elseif { [IP::addr [IP::client_addr] equals 10.0.0.15] }{
        snat 172.18.1.3
    }
}

}