For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lizhuh_55036's avatar
lizhuh_55036
Icon for Nimbostratus rankNimbostratus
Jun 05, 2009

snat pool of a virtual server

Can someone with experience help me out here?     After a snat pool of ex_ip1, ex_ip2, ex_ip3 is assigned to a virtual server. Then response to clients will go through BigIP.     ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 15, 2009
Hi Linda,

LTM will "un-translate" the address translation for responses back to the client so the source IP will be the virtual server IP address. 

 
 client: 1.1.1.1 
 VIP: 2.2.2.2 
 SNAT: 3.3.3.3 
 server: 4.4.4.4 
                    Source       |     Destination 
                    ------------------------------------- 
 Client -> VIP      1.1.1.1      |     2.2.2.2 
 LTM -> server      3.3.3.3      |     4.4.4.4 
 server -> LTM      4.4.4.4      |     3.3.3.3 
 VIP -> client      2.2.2.2      |     1.1.1.1

Aaron