For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OttimoMassimo_1's avatar
OttimoMassimo_1
Icon for Nimbostratus rankNimbostratus
May 13, 2013

Using the same IP address for a VIP and a SNAT - yay or nay?

Hi,   We've run into a potential issue with response times from a VIP. Said VIP shares an IP address with a unique SNAT for outbound connections from a range of internal hosts. The VIP shares a ra...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
May 13, 2013
I'd imagine the only way is to view the connection table: '[tmsh] command sys connection all-properties' but this won't inform you of conflicts. However it may provide some clues in that you can run the command a few times a day and compare the ports used with the SNAT and those used with the VS and see if they ever overlap. Beyond that a tcpdump may be useful but somewhat overwhelming.