Forum Discussion

cxcal_18687's avatar
cxcal_18687
Icon for Nimbostratus rankNimbostratus
Feb 25, 2008

Using Big-IP as a router

I have yet to get our appplication (product from standard networks) to source the the client IP address for auditing purposes.     Application only works when SNAt is disabled.     Is it p...
config
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 03, 2008
Process should be:

 

 

Server1 (192.168.1.10) -> update.microsoft.com (65.55.184.57/443)

 

 

packet arrives at wildcard VIP, which is listening only on server vlan to only tcp port 443.

 

 

BigIP checks source address, sends traffic destined for 65.55.184.57 to node 172.16.1.1 as defined in the iRule. If return path is not symmetric, you may want to add a specific snat address to these source routing decisions.