Forum Discussion

ascension2020_6's avatar
ascension2020_6
Icon for Nimbostratus rankNimbostratus
Jun 08, 2012

Using VIP IP as variable for SNAT

Hi folks,     I've been working with F5s for about 10 months but I didn't have to play with iRules until a couple of days ago. I apologize if this is a newb question, but I've been looking throu...
application delivery
dev
devops
iRules
ascension2020_6's avatar
ascension2020_6
Icon for Nimbostratus rankNimbostratus
Jun 12, 2012

Aaron,

 

 

 

Enclosing it in brackets did the trick! Thanks for your help!

 

 

 

To clarify, we normally use SNAT pools, but in this case we're having to NAT IPSEC, and there's a bug in 10.2.1 that is causing it to fail when configured to use a SNAT Pool or SNAT Automap:

 

 

 

SOL11551: Forwarding virtual servers configured for non-TCP/UDP traffic discard return traffic when SNAT is enabled:

 

This is the result of a known issue. Forwarding virtual servers configured to use a transport layer protocol other than TCP or UDP, such as Encapsulation Security Payload (ESP), discard return traffic when a SNAT pool or SNAT auto map is enabled. When this issue occurs, the BIG-IP system receives the return traffic but does not associate it with the virtual server. Configuring a global SNAT for the traffic does not resolve the issue.