For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Apr 11, 2014

So you won't want to perform any SNAT on the BIG-IP virtual server in order for the server to see the original client IP address. If the server's default gateway is not set to go back through the BIG-IP, then you may need to enable policy based routing on your L3 switch. If this is a Cisco switch, it can be done by creating a route-map and setting a next hop of the BIG-IP for any traffic sourcing from the server IP address bound for the client.