Forum Discussion

mikr0minquez_15's avatar
mikr0minquez_15
Icon for Nimbostratus rankNimbostratus
Nov 24, 2014

SNAT between router domain

Hello all we have an F5 LTM with different router domains configured. In a RD%3 we have a pool with private IP. This pool is reachable from outside using a VS located in RD%5. This is working properly. From outside customers uses VS public IP in RD%5 and they reach POOL devices on RD%3. What is not working is the outbound traffic. When POOL devices start connections. We configured an SNAT POOL with an public IP%5 (from RD%5). Is there something in particular we have to do for configuring SNAT between different RDs? Basically we want to use a IP from RD%5 for traffic generated form RD%3. Thanks

 

Mirko

 

3 Replies

  • can you post configuration (e.g. virtual server, snat) which handles server (pool member) initiated traffic?

     

  • Hello, sorry for the delay we configured in Local Traffic ›› Address Translation : SNAT List

     

    ltm snat /Common/infoCH { origins { 10.11.12.13%3/32 { } } translation /Common/222.30.41.13%5

     

    best regards

     

    • nitass's avatar
      nitass
      Icon for Employee rankEmployee
      do you also have virtual server which will match server-initiated traffic? sol9038: The order of precedence for local traffic object listeners https://support.f5.com/kb/en-us/solutions/public/9000/000/sol9038.html anyway, would it be easier to remove snat list and create virtual server for server-initiated traffic (e.g. 0.0.0.0%3:0/0 with 222.30.41.13%5 as snatpool member)? can you try?