Forum Discussion

schmal_111133's avatar
schmal_111133
Icon for Nimbostratus rankNimbostratus
Feb 13, 2013

specific source port translation

Hi,   I am trying to do SNAT while selecting a specific port for that but for some reason when the F5 receive the response it is sending a RST to the WS and not retranslating it to the original IP...
application delivery
dev
devops
irules
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 15, 2013
Probably F5 have some issue with the hash that select the tmm when the SYN ACK arrivedi understand the issue is expected because we force to use specific snat port. normally, bigip will select snat port to ensure return packet will be hashed to the same tmm packet is sent out.

 

 

When CMP is enabled on the system, the BIG-IP system may modify the client source port for virtual server or SNAT connections in order to ensure that both client and server-side flows are hashed to the same TMM instance. This issue can occur even when the TM.PreserveClientPort database variable is set to enabled.sol8227: The BIG-IP system may modify the client source port for virtual server connections when Clustered Multi-Processing is enabled

 

http://support.f5.com/kb/en-us/solutions/public/8000/200/sol8227.html