Forum Discussion

Norman_Elton_13's avatar
Norman_Elton_13
Icon for Nimbostratus rankNimbostratus
Oct 16, 2013

SNAT pool member seems to be ignored

I've got an IP Forwarding virtual server. With SNAT enabled, and a pool specified, it works fine. When I disable SNAT on the virtual server and use "snatpool" on an iRule, it also works fine. But when I specify an individual SNAT pool member (using snatpool member ), it still seems to randomly draw a member from the pool.

 

I also tried just "snat ", but in that case, traffic was not forwarded at all. No error messages anywhere.

 

Thoughts? Thanks,

 

Norman

 

application delivery
devops
iRules

3 Replies

Sort By
  • bboyjnr_8532's avatar
    bboyjnr_8532
    Icon for Cirrus rankCirrus
    Oct 16, 2013

    Hi Norman,

     

    Wiki says its valid...

     

    https://devcentral.f5.com/wiki/iRules.snatpool.ashx

     

    can we have a look at the rule?

     

    thanks,

     

    bb

     

    • Norman_Elton_13's avatar
      Norman_Elton_13
      Icon for Nimbostratus rankNimbostratus
      Oct 16, 2013
      The rule is pretty simple: when CLIENT_ACCEPTED { snatpool WM-SNAT member 192.168.2.22 } It continues to function as if I hadn't specified a member. I'm suspecting it may just be a bug. If I specify an IP address with "snat [IP]", it seems that IP must already be configured in a SNAT pool, or else the F5 won't respond to ARPs. So that issue is explainable. Thanks Norman
    • bboyjnr_8532's avatar
      bboyjnr_8532
      Icon for Cirrus rankCirrus
      Oct 16, 2013
      just tested and used... when CLIENT_ACCEPTED { snatpool snat_pool member 172.16.17.37 } and works on v10 perfectly and v11, maybe a bug :S