Forum Discussion
mnb_63148
Nimbostratus
NimbostratusSNAT question
If I a SNAT Pool with only 1 IP in the Member List, will Big-IP allow traffic initiated from the outside in and then translate that address to the IP in the Member List?
For example, if I have a...
A SNAT pool will translate traffic coming through the BIG-IP bound for a resource 'behind' it. So for example:
Client IP address - 10.100.100.100 Server IP address - 20.100.100.100 BIG-IP virtual server IP address - 10.10.10.10 SNAT pool member - 20.10.10.10
Client will initiate a connection the virtual server IP address. The virtual server being configured with the SNAT pool will translate the source IP address of the traffic to 20.10.10.10 and send along to the server at 20.100.100.100.
If for some reason a client sends traffic to the SNAT pool member (if routing is in place to allow this to happen), the BIG-IP will drop the traffic.
SNAT translation will only occur when traffic is destined to the virtual server IP address to which the SNAT pool is applied.
Cory_50405
Noctilucent
NoctilucentA SNAT pool will translate traffic coming through the BIG-IP bound for a resource 'behind' it. So for example:
Client IP address - 10.100.100.100 Server IP address - 20.100.100.100 BIG-IP virtual server IP address - 10.10.10.10 SNAT pool member - 20.10.10.10
Client will initiate a connection the virtual server IP address. The virtual server being configured with the SNAT pool will translate the source IP address of the traffic to 20.10.10.10 and send along to the server at 20.100.100.100.
If for some reason a client sends traffic to the SNAT pool member (if routing is in place to allow this to happen), the BIG-IP will drop the traffic.
SNAT translation will only occur when traffic is destined to the virtual server IP address to which the SNAT pool is applied.
mnb_63148Nimbostratus
NimbostratusThanks, Cory. We do not have a forwarding virtual server set up. We just have SNAT pools in place so that a server on a private network can initiate traffic to an address on the Internet. The SNAT gives the server a public IP. Thanks for answering my question.