Forum Discussion
omar05_132659
Nimbostratus
Oct 19, 2014which one is matching first? SNAT or iRule?
Hello folks,
Hope you could help me with this simple question about LTM behaviour.
I just assumed as LTM admnistrator. My boss has asked me to optimize the configuration of a BIG IP by remo...
omar05_132659
Nimbostratus
Oct 21, 2014Hello folks,
Thanks a lot for responding.
After seeing the diagram you recommended, I conclude that if there is no a packet filter, the virtual server will match first and then its iRule and the other objects inside it even an SNAT. And then, a Global SNAT will match. In my case, I need to erase the global SNAT right?
My irule is as follows:
when CLIENT_ACCEPTED {
if {[IP::addr [IP::client_addr] equals 10.1.1.2/32]}{
snatpool snat_pool_mail_mydomain_dot_com
}
if {[IP::addr [IP::client_addr] equals 10.1.1.3/32]}{
snatpool snat_pool_mail_mydomain_dot_com
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects