Forum Discussion

Ravager's avatar
Ravager
Icon for Altostratus rankAltostratus
Dec 09, 2019

Webtops and how IP to intenal is determined

Just a generalist query around which source IP from the F5 is used for various sessions in webtops.

 

Say I have a weblink, a rdp session, vpn and a ssh session on the webtop.

 

I believe the VPN will use the ip address assigned to the vpn pool?

 

Will the weblinks, rdp and ssh session use the snat pool assigned for the webtop vs or is there a way to control it on a per function?

 

Cheers

BIG-IP Access Policy Manager (APM)
security
  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Dec 10, 2019

    Hello, looking at some solutions it is basically implied that App Tunnels, RDP, Portal Access, Citrix, etc will use the Virtual Server SNAT. Webtop links are direct links and Network Access will also use the Virtual Server SNAT, BUT in the Network Access configuration you have the option to set a SNAT or set it to none (typical for VoIP use cases).

     

    In addition there is also a Route Domain and SNAT Selection object that can be added in the VPE.

     

    https://support.f5.com/csp/article/K33368912

     

    https://support.f5.com/csp/article/K26410462