Forum Discussion
schmal_111133
Nimbostratus
Feb 13, 2013specific source port translation
Hi,
I am trying to do SNAT while selecting a specific port for that but for some reason when the F5 receive the response it is sending a RST to the WS and not retranslating it to the original IP...
schmal_111133
Nimbostratus
Feb 14, 2013Hi nitass,
Thanks for the response.
I am running 10.2.4 HF5, What version you are running?
I tried what you suggest and I get the following log:
Feb 14 11:46:29 local/tmm2 err tmm2[5586]: 01230140:3: RST sent from 10.107.200.200:12345 to 173.194.47.80:80, [0x11d265d:1751] No local listener
I am trying to figure out why the F5 claims that there is no local listener if there is connection on that:
[root@LBA-F5-1A:Active] config b conn client 10.107.200.140 show all -n
VIRTUAL any <-> NODE 10.115.243.30:53 TYPE any 1/2
CLIENTSIDE 10.107.200.140:41495 <-> 10.115.243.30:53
(pkts,bits) in = (102, 7236) out = (0, 0)
SERVERSIDE 10.107.200.200:12345 <-> 10.115.243.30:53
(pkts,bits) in = (0, 0) out = (102, 7236)
PROTOCOL 17 UNIT 1 IDLE 54 (300) LASTHOP WDN_MIG_Internal 00:14:5e:a8:0a:04
VIRTUAL any <-> NODE 10.115.243.243:53 TYPE any 1/2
CLIENTSIDE 10.107.200.140:41495 <-> 10.115.243.243:53
(pkts,bits) in = (105, 7467) out = (0, 0)
SERVERSIDE 10.107.200.200:12345 <-> 10.115.243.243:53
(pkts,bits) in = (0, 0) out = (105, 7467)
PROTOCOL 17 UNIT 1 IDLE 3 (300) LASTHOP WDN_MIG_Internal 00:14:5e:a8:0a:04
VIRTUAL any <-> NODE 10.115.243.243:53 TYPE any 1/1
CLIENTSIDE 10.107.200.140:54872 <-> 10.115.243.243:53
(pkts,bits) in = (1, 55) out = (0, 0)
SERVERSIDE 10.107.200.200:12345 <-> 10.115.243.243:53
(pkts,bits) in = (0, 0) out = (1, 55)
PROTOCOL 17 UNIT 1 IDLE 67 (300) LASTHOP WDN_MIG_Internal 00:14:5e:a8:0a:04
VIRTUAL any <-> NODE 173.194.47.80:80 TYPE any 1/0
CLIENTSIDE 10.107.200.140:56476 <-> 173.194.47.80:80
(pkts,bits) in = (3, 180) out = (0, 0)
SERVERSIDE 10.107.200.200:12345 <-> 173.194.47.80:80
(pkts,bits) in = (0, 0) out = (3, 180)
PROTOCOL 6 UNIT 1 IDLE 104 (300) LASTHOP WDN_MIG_Internal 00:14:5e:a8:0a:04
This is the virtual server:
[root@LBA-F5-1A:Active] config b virtual Allow_Routes list
virtual Allow_Routes {
srcport change
ip forward
lasthop pool Last_HOP
destination any:any
mask 0.0.0.0
rules bbb
vlans WDN_MIG_Internal enable
}
and this is the rule:
rule bbb {
when CLIENT_ACCEPTED {
snat 10.107.200.200 12345
}
}
By the way in the first time that I tried to open connection it was successfully opened but after that all the attempts failed, including to another destination IP and also after cleaning all the connections on the F5.
I can't see any logical reason why it is not working for me as expected :\
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects