Forum Discussion
McClane_62901
Jul 13, 2009Nimbostratus
ssh virtualserver
Hello...I've got a virtual server, x.x.x.42:22, which points to a pool, 192.168.1.42:22, using a "Standard" type, and all works well...except the sshd sees my connection as coming from the F5 ("last" ...
hooleylist
Jul 16, 2009Cirrostratus
As cmbhatt was suggesting, there are a few different places that SNAT can be enabled/disabled. You could have an iRule specifying SNAT; SNAT enabled on the virtual server, or a global SNAT. Finally, you can have SNAT enabled/disabled at the pool level. Having SNAT enabled on the pool alone won't trigger SNAT'ing to take place. It must be enabled in another place as well. But you can prevent SNAT from being using for traffic to a specific pool by disabling it on the pool.
If you've already disabled the first two, and still see the source address as LTM, you can check under Local Traffic >> SNATs >> SNAT list for a globally applied SNAT.
Assuming there is a global SNAT, you could either change it to not match this traffic or more ideally, disable SNAT on the SSH pool.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects