Forum Discussion
JohnQuintas_910
Nimbostratus
Oct 16, 2015SNAT outbound connections from pool members to virtual server IP for a specific outbound port
I have a virtual server for inbound ftp connections
Virtual server: 1.1.1.1:21, using the standard FTP profile and source_addr persistence, 30 min timeout
Pool Members:
10.0.0.10:21
10.0.0.11:...
Stanislas_Piro2
Cumulonimbus
Oct 20, 2015Hi,
First, when creating a forwarding VS, create a specific VS for FTP:
VS_OUT_FTP
- Type Standard
- Destination 0.0.0.0/0
- profile ftp
- translate disable (default when creating a VS with a network destination)
- Pool none
This will allow FTP dynamic port to be handled as FTP Data connection.
After that, you can create the irule with switch instead of if, elseif, elseif, ..
when CLIENT_ACCEPTED {
switch [IP::client_addr] {
"10.0.0.10" -
"10.0.0.11" { snat 172.18.1.1 }
"10.0.0.12" -
"10.0.0.13" { snat 172.18.1.2 }
"10.0.0.14" -
"10.0.0.15" { snat 172.18.1.3 }
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects