SSL VPN question

[cjl1775]

Hello all new to the form but have a question on ssl vpn config

have a f5 with vpn floating ip set 192.168.10.250 and 192.168.10.251 these are the defualt gateways

created a new vlan and interface of 192.168.11.2 gw 192.168.11.1 this is what we would like to use as the source ip for ssl traffic using a pool 192.168.100.0/24 the up stream router already points to the 192.168.100.0/24 pool is this doable 

there is a route in the f5 to point the pool ip 192.168.100.0/24 to  the 192.168.11.2 address all other routing points to the floating ip 192.168.10.250/192.168.10.251

[cjl1775]

As a note this is just tryinh to prevent any asymetric data flow for the vpn

[Sebastiansierra]

Hi,

What is your question ?

[cjl1775]

how to use the thrid floating ip 192.168.11.2 to be the source for all vpn traffic. not the  other floating ip addresses?

[Sebastiansierra]

Hi,

You can create a Snat pool and then assign it to the Virtual Server. for the source addr translation, you can follow the steps in the next link:

https://support.f5.com/csp/article/K47945399

By default when you configure automap, the system use the Float IPs but you can modify this behavior assigning a Snat pool and forcing the VS use this IP to deliver the traffic.