For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JohnQuintas_910's avatar
JohnQuintas_910
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

SNAT outbound connections from pool members to virtual server IP for a specific outbound port

I have a virtual server for inbound ftp connections Virtual server: 1.1.1.1:21, using the standard FTP profile and source_addr persistence, 30 min timeout Pool Members: 10.0.0.10:21 10.0.0.11:...
application delivery
LTM
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Oct 20, 2015

You could create your VIP with dest 0.0.0.0:21 and source 10.0.0.10/31 and apply your SNAT pool to it. And then the same for port 20.

 

Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 20, 2015
FTP data in active mode is not Client (port dynamic) --> server (port 20) but server (port 20) --> Client (port dynamic)