Forum Discussion

monica_74227's avatar
monica_74227
Icon for Nimbostratus rankNimbostratus
Jun 23, 2009

intelligent SNAT generate errors

Dear all,

 

 

I write a iRule as the following:

 

when CLIENT_ACCEPTED {

 

if { [matchclass [IP::local_addr] equals $::Uni_class]} {

 

pool Uni_first_pool

 

}

 

elseif { [matchclass [IP::local_addr] equals $::CRT_class]} {

 

pool CRT_first_pool

 

}

 

else {

 

pool Default_gateway_pool

 

}

 

}

 

when LB_SELECTED {

 

if {[IP::addr [LB::server addr] equals 11.10.10.254] and [IP::addr [IP::client_addr] equals 10.6.3.4] } {

 

snat snat_uni_pool

 

}

 

elseif {[IP::addr [LB::server addr] equals 11.10.10.254] and [IP::addr [IP::client_addr] equals 10.6.3.5] } {

 

snat snat_uni_pool

 

}

 

elseif {[IP::addr [LB::server addr] equals 10.10.10.254] and [IP::addr [IP::client_addr] equals 10.6.3.4] } {

 

snat snat_crt_pool

 

}

 

elseif {[IP::addr [LB::server addr] equals 10.10.10.254] and [IP::addr [IP::client_addr] equals 10.6.3.5] } {

 

snat snat_crt_pool

 

}

 

else {

 

snat automap

 

}

 

}

 

 

however, that genertat some errors when I update with Webgui, just like the picture, I don't know what is wrong, thank you for you help!
application delivery
dev
devops
iRules

4 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jun 23, 2009
    Hi,

    The error indicates you were using 'snat pool snat_crt_pool'. The command to specify a SNAT pool is snatpool (without a space).

    Can you try this if you want to use SNAT pools and automap? 

     
 when CLIENT_ACCEPTED { 
    if { [matchclass [IP::local_addr] equals $::Uni_class]} { 
       pool Uni_first_pool 
    } elseif { [matchclass [IP::local_addr] equals $::CRT_class]} { 
       pool CRT_first_pool 
    } else { 
       pool Default_gateway_pool 
    } 
 } 
 when LB_SELECTED { 
    if {([IP::addr [IP::client_addr] equals 10.6.3.4] or [IP::addr [IP::client_addr] equals 10.6.3.5]) and \ 
       [IP::addr [LB::server addr] equals 11.10.10.254]}{ 
       snatpool snat_uni_pool 
    } elseif {([IP::addr [IP::client_addr] equals 10.6.3.4] or [IP::addr [IP::client_addr] equals 10.6.3.5]) and \ 
       [IP::addr [LB::server addr] equals 10.10.10.254]}{ 
       snatpool snat_crt_pool 
    } else { 
       snat automap 
    } 
 }

    Aaron
  • monica_74227's avatar
    monica_74227
    Icon for Nimbostratus rankNimbostratus
    Jun 24, 2009
    hey Aaron,

     

    I have tried that iRule, It should now include the "\", the following is okay :

     

    when CLIENT_ACCEPTED {

     

    if { [matchclass [IP::local_addr] equals $::Uni_class]} {

     

    pool Uni_first_pool

     

    }

     

    elseif { [matchclass [IP::local_addr] equals $::CRT_class]} {

     

    pool CRT_first_pool

     

    }

     

    else {

     

    pool Default_gateway_pool

     

    }

     

    }

     

    when LB_SELECTED {

     

    if {([IP::addr [IP::client_addr] equals 12.10.10.1] or [IP::addr [IP::client_addr] equals 12.10.10.2]) and [IP::addr [LB::server addr] equals 10.10.10.254] } {

     

    snatpool snat_uni_pool

     

    }

     

    elseif {([IP::addr [IP::client_addr] equals 12.10.10.1] or [IP::addr [IP::client_addr] equals 12.10.10.2]) and [IP::addr [LB::server addr] equals 11.10.10.254] } {

     

    snatpool snat_crt_pool

     

    }

     

    else {

     

    snat automap

     

    }

     

    }
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jun 24, 2009
    The backslash just escapes the newline character and allows you to break up long lines. Functionally, you can remove it with no difference.

     

     

    Aaron