Forum Discussion
The_Bhattman
Mar 05, 2008Nimbostratus
It sounds like you want something called VIP bounceback.
I can only think of 3 ways to do this.
Way 1: Autosnat all requests from the VIP.
Way 2 : Use an IRULE and datagroups
when CLIENT_ACCEPTED {
if { [matchclass [IP::remote_addr] equals $::dg_internal]} {
snat automap
}
}
What 3 use irule and switch command.
when CLIENT_ACCEPTED {
switch [IP::remote_addr] {
"IP ADDRESS/MASK" { snat automap }
"2nd IP ADDRESS/MASK" { snat automap }
}
}
Way 1 will work but it snats EVERYTHING coming into the Virtual server
Way 2 will work and selectively snats based on the Clients IP address. The irule is reusable
Way 3 might be more efficient because it doesn't use a datagroup object, but the code cannot be reused because the "IP Address/MASK" is specifically in the IRULE statements
My personal preference is WAY 2, but you can use any of these.
I hope this helps.
CB