Forum Discussion

Krys_Frankiewic's avatar
Krys_Frankiewic
Icon for Nimbostratus rankNimbostratus
Jun 03, 2016

Auto Map & SNAT

Is it possible to have one VS using Auto Map and the second one using SNAT? The idea is to translate client IP address to the floating address if accessing one VS or to the SNAT address if accessing ...
BIG-IP
devops
LTM
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Jun 03, 2016

Hi,

 

The SNAT configuration is setup on each VS, you can have VS1 configured for automap and VS2 configured with a SNAT.

 

You have 2 VS, so even if you have only one client you establish two separate connection to access each other.

 

The question is more, are you sure that your backend support to have a client connecting and presenting with 2 IPs ?

 

  • Krys_Frankiewic's avatar
    Krys_Frankiewic
    Icon for Nimbostratus rankNimbostratus
    Jun 06, 2016
    Thanks for the replay. I created SNAT Pool List with one IP address and assigned that list to the VS. F5 does the translation but is sending RST to SYN ACK. Client has no problem to see different source IP addresses.
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Jun 06, 2016
    Did you check Firewall rules or network routing for the IP in the SNAT pool
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Jun 06, 2016
    You can activate logging of tcp reset with the following command : tmsh modify /sys db tm.rstcause.log value enable