Forum Discussion
SSL PassThrough Configuration
Hi @iaine
I successfully enabled the SSL pass through and SNAT, but there is an issue, it works for a very short time and after that I get the same error ERR_CONNECTION_REFUSED by the client. When I update SNat with the same configuration it works again and after that it gives the same error. Can you please tell what is happening here?
Are you saying that you have not applied any monitor for your pool members. Please share your existing setup masking the imp details.
tmsh list ltm virtual <virtual name>
tmsh list ltm pool <pool name>
- KhubaibArshadDec 18, 2019
Nimbostratus
root@f5-35(Active)(tmos)# list ltm virtual vns-portal-vip
ltm virtual vns-portal-vip {
destination 10.10.10.70:any
ip-protocol tcp
mask 255.255.255.255
pool VNS-Portal-Pool
profiles {
fastL4 { }
}
snatpool vns-snat-pool
translate-port disabled
}
root@f5-35(Active)(tmos)# list ltm pool VNS-Portal-Pool
ltm pool VNS-Portal-Pool {
members {
10.10.10.71:smtp {
session monitor-enabled
}
10.10.10.71:domain {
session monitor-enabled
}
10.10.10.71:http {
session monitor-enabled
}
10.10.10.71:https {
session monitor-enabled
}
10.10.10.71:smtps {
session monitor-enabled
}
10.10.10.71:submission {
session monitor-enabled
}
10.10.10.72:smtp {
session monitor-enabled
}
10.10.10.72:domain {
session monitor-enabled
}
10.10.10.72:http {
session monitor-enabled
}
10.10.10.72:https {
session monitor-enabled
}
10.10.10.72:smtps {
session monitor-enabled
}
10.10.10.72:submission {
session monitor-enabled
}
10.10.10.73:smtp {
session monitor-enabled
}
10.10.10.73:domain {
session monitor-enabled
}
10.10.10.73:http {
session monitor-enabled
}
10.10.10.73:https {
monitor none
}
10.10.10.73:smtps {
session monitor-enabled
}
10.10.10.73:submission {
session monitor-enabled
}
}
monitor tcp and https_443
}
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com