For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HA13029's avatar
HA13029
Icon for Nimbostratus rankNimbostratus
Feb 23, 2018

SNAT pool with different IP address

Hello,

 

I have a SNAT pool with different IP address in different range (like 192.168.1.5 and 192.168.2.5). The virtual server has a pool of server in these different range (192.168.1.100 and 192.168.2.100). In my config I have I have two vlans SELFIP 192.168.1.1 and 192.168.2.1. I need to be sure traffic going to 192.168.1.100 use the Pool IP 192.168.1.5 and traffic going to 192.168.2.100 use the Pool IP 192.168.2.5. Is it the default behaviour of F5 ? Does the F5 choose the Pool IP based on the Destination VLAN network ?

 

Regards,

 

HA

 

application delivery
LTM

2 Replies

  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Feb 23, 2018

    Yes, see this article:

     

    https://support.f5.com/csp/article/K7820

     

    When using a SNAT pool with IP addresses from the egress VLAN (the VLAN for which the packet exits in the BIG-IP system) and non-egress VLAN networks, the egress VLAN network address is given higher priority. For example, egress VLAN external has a self IP of 172.16.0.254/24, and SNAT pool member addresses of 172.16.0.1/24 and 10.1.1.1/24. The BIG-IP system prefers the egress VLAN SNAT pool member address 172.16.0.1, and will continue to use the same address until it becomes unavailable.