Forum Discussion
valve404
Jan 21, 2022Nimbostratus
SNAT with client and pool member on same subnet
Hi, We have sort of an aut-last-hop feature on our firewall, and the lb is placed in front of the firewall. This ensures when a client from a random vlan behind the firewall connects to a VIP, the r...
DevBabu
Jan 28, 2022Cirrus
1. Create a SNAT pool and add SNAT Pool members to it.
[SNATPOOL]
ltm snatpool dmz1_snat {
members {
172.16.0.7
172.16.0.8
}
}
ltm snatpool dmz2_snat {
members {
172.16.1.7
172.16.1.8
}
}
2. Create a SNAT data group
[ SNAT-DATAGROUP ]
ltm data-group internal snat-dg {
records {
172.16.0.0/24 { dmz1_snat }
172.16.1.0/24 { dmz2_snat }
}
type ip
}
3. Write iRule and apply it to virtual server
when LB_SELECTED {
if { [class match [LB::server addr] equals snat-dg] } {
snatpool [class match -value [LB::server addr] equals snat-dg]
} else {
snat automap
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects