Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
Feb 10, 2015

sNAT with AFM

Hi, LB is acting as default GW of servers and FW. We've been using iRules for firewalling and SNATing when needed. Now we want to start to use AFM and I am not sure what is best approach to do SNAT ...
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Feb 10, 2015

Hi Zdenek,

 

I would leave the SNAT configuration with the LTM part of the configuration for transparency reasons.

 

Especially when applying a SNAT out of an iRule you need to make sure the related IP address is contained in the SNAT Translation List, configured as a floating self IP or used as virtual address for a virtual server. This is mandatory, as this address has to respond to ARP requests.

 

Thanks, Stephan