For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

shadow82's avatar
shadow82
Icon for Cirrus rankCirrus
Sep 13, 2023

Turn off SNAT selectively

Hi! I have F5 VE Act/Stb cluster running 16.1.3 build 0.0.12 with a single external VServer full of LTM policies that redirect traffic to internal VServer on the same F5 and next it's going towards ...
application delivery
cloud
No_SNAT_Selective
Paulius's avatar
Paulius
Icon for MVP rankMVP
Sep 13, 2023

shadow82 The following should work for you but will most likely cause an issue when the response traffic comes back because the traffic will show the SNAT IP of the External F5 SNAT pool. Your best option here would be to create a NAT for the Internal F5 SNAT IP.

when CLIENT_ACCEPTED priority 500 {

   if { [IP::addr [IP::client_addr] equals <external_VS_SNAT_POOL_IP>] }{
      snat none
   }

}