For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

coolhill_17403's avatar
coolhill_17403
Icon for Nimbostratus rankNimbostratus
Dec 03, 2009

snat Persistence question

I have a question for version9.4.7

 

 

 

when LB_SELECTED {

 

set client_ip [IP::client_addr]

 

set client_last [getfield $client_ip "." 4]

 

if {[IP::addr [LB::server addr] equals 192.168.0.254] }{

 

set snat_mod [expr $client_last%4]

 

set snat_atm [incr snat_mod 230]

 

snat 192.168.0.$snat_atm

 

log local5.warning "client [IP::client_addr] access [IP::local_addr] use gateway [LB::server addr] snat address = 192.168.0.$snat_atm"}

 

}

 

 

This is my rules

 

In order to solve snat persistence.

 

In Version 9.2.3 is OK.and in version 9.4.7 is unavailable

 

I hope to find someone to help me.
config
design

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Dec 03, 2009
    Do you see the log statement in /var/log/ltm on 9.4.7?

     

     

    Also, I think you could save a little bit of CPU cycles by moving the set client_ip and set client_last inside the LB::server addr check.

     

     

    Aaron