Forum Discussion

Marc_119334's avatar
Marc_119334
Icon for Nimbostratus rankNimbostratus
Oct 09, 2014

Automap only some IPs

I have a VIP that does load balance for LDAP/s. Real servers for other VIPs that need to authenitcate against the LDAP VIP beak TCP because they are on the same vlan as the real ldap servers. I want to know if there is a a iRule I can use to force SNAP (automap) for servers that are on the same vlan as my ldap servers when hitting the ldap VIP.

 

application delivery
devops
iRules
LTM

1 Reply

Sort By
  • mimlo_61970's avatar
    mimlo_61970
    Icon for Cumulonimbus rankCumulonimbus
    Oct 09, 2014

    Yes, you can turn SNAT on in an iRule

    when CLIENT_ACCEPTED {
    if { [IP::addr [IP::client_addr] equals 10.10.10.0/24] } {
        snat automap
    }
}

    I think that is the right way to match a subnet, I've only used this rule to match hosts in a data group.