Forum Discussion
Carlos_123412
Oct 23, 2015Nimbostratus
Strange SNAT IP address behaviour
Hello everyone,
Recently we've discovered a weird behaviour on our BIG-IP system. We are currently running version 11.5.1 on an 8950 Active/Passive HA pair.
We have detected that a couple o...
Carlos_123412
Oct 27, 2015Nimbostratus
Hello Cathy,
Thanks for your answer. This are the two VS that are using the SNAT Pool. As for the rest of the SNATs all of them are like this one, we've got about 319 SNAT pools. For privacy reasons I've changed VS name and obcured IP addressess.
ltm virtual /Common/virtual_server_1_80 {
destination /Common/XX.XX.41.86:80
ip-protocol tcp
mask 255.255.255.255
persist {
/Common/ip_origen_3600 {
default yes
}
}
pool /Common/Pool_virtual_server_1_80
profiles {
/Common/http { }
/Common/tcp_3600 { }
}
source 0.0.0.0/0
source-address-translation {
pool /Common/virtual_server_1_snatpool
type snat
}
translate-address enabled
translate-port enabled
}
ltm virtual /Common/virtual_server_1_8081 {
destination /Common/XX.XX.41.86:8081
ip-protocol tcp
mask 255.255.255.255
persist {
/Common/ip_origen_3600 {
default yes
}
}
pool /Common/Pool_virtual_server_1_8081
profiles {
/Common/tcp_3600 { }
}
source 0.0.0.0/0
source-address-translation {
pool /Common/virtual_server_1_snatpool
type snat
}
translate-address enabled
translate-port enabled
}
ltm pool /Common/Pool_virtual_server_1_80 {
members {
/Common/XX.XX.XX.225:80 {
address XX.XX.XX.225
}
/Common/XX.XX.XX.226:80 {
address XX.XX.XX.226
}
}
monitor /Common/http
}
ltm pool /Common/Pool_virtual_server_1_8081 {
members {
/Common/XX.XX.XX.225:8081 {
address XX.XX.XX.225
}
/Common/XX.XX.XX.226:8081 {
address XX.XX.XX.226
}
}
monitor /Common/tcp
}
ltm snatpool /Common/virtual_server_1_snatpool {
members {
/Common/XX.XX.42.86
}
Persitent Profile "ip_origen_3600" consits of source address affinity with an 3600 seconds timeout.
As you can see, this config is quite straightforward.
Best regards, Carlos
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects