SNAT outbound only for specific servers to specific destination

source setting is introduced in 11.3.0.

sol14800: Order of precedence for virtual server matching (11.3.0 and later)

if you are running version prior to 11.3.0, you may use irule to check client ip and take whatever action you want e.g. snat, reject.

IP::client_addr

Thanks. I am running 11.2. What if i have only 3 servers in the vlan that need to be SNATed. Is it possible to refer only the 3 servers in an object/datagroup and call in the irule?

Can't you set up a one-to-one SNAT mapping for each of the 3 servers?

Hi Karthik, Here is an example of where you can apply an Irule on a Forwarding Virtual Server.

The below assumes you have created a network address Datagroup and snat pool

when CLIENT_ACCEPTED {
 This irule will snat all requests except for clients destined to a network that doesn't need to be SNAT'd

if { ![class match [IP::local_addr] equals dg-exclude-net] } {
      snatpool snat_client_outbound
      }
}

I hope this helps

-=Bhattman=-

Thanks Bhattman. Let me try this one.