Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

query on static NAT

Hi, we have design like the traffic from the client to LB is not getting SNAT so the source IP will be preserverd all the way to the application servers.

As far as the reverse traffic is concerned, we have a static NAT is configured on LB to change the source IP of the traffic flow to the VIP IP of LB.

we have alos VIP of type "forwarding IP" for routing based on host IP for the traffic from the server to LB.

for some reasons I was told the traffic from the server is not getting NATed to the IP of VIP.

Please let me know do I need to associate the NAT to the VIP to take effect of it?

Or does NAT object match for the specfic traffic flow and does the translation?

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

If you're not using SNAT and are preserving the client's real IP address all the way to the application servers then you will need to ensure that either you use the F5 VIP as the default gateway for the application servers or a network design/routing that will ensure that the return path traffic goes back to the F5.

Associating NAT to the VIP will ensure that the traffic returns via the F5 and is applied by using "Source Address Translation : AutoMAP" or "Source Address Translation : SNAT : user defined SNAT pool".

0
Comments on this Answer
Comment made 20-Sep-2018 by Thiyagu 186

Hi, Can we Source Address Translation of AutoMAP , SNAT list or SNAT pool for the reverse traffic from the server to the client?

What are all the available option for SNAT of the traffic from the server to the client?

Regards, Thiyagu

0