Forum Discussion

er_sandy_27437's avatar
er_sandy_27437
Icon for Nimbostratus rankNimbostratus
Jul 18, 2017

Dynamic NAT configuration on F5

As part of migration of application from ACE to F5, I need to create a dynamic nat pool on F5 to allow servers which have gateway on ACE(to be moved to F5)

 

interface vlan 133 description ACE_ROUTING ip address 10.29.20.1 255.255.240.0 alias 10.29.20.2 255.255.240.0 peer ip address 172.29.20.3 255.255.240.0 access-group input any nat-pool 133 10.78.48.1 10.78.63.254 netmask 255.255.240.0

 

In order to achieve this I created Data-group with the destination addresses as Hosts with address 10.78.48.1/255.255.240.0

 

Crete iRule

 

when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_addr] equals 10.29.20.0/255.255.240.0] } {

 

snat Hosts

 

} }

 

Apply this on a forwarding VIP with Source as 10.29.20.0/255.255.240.0 over vlan 133.

 

This is not working though, Any other way to achieve this please let me know.

 

application delivery
iRules
LTM

2 Replies

Sort By
  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Sep 28, 2018

    using the snat commands means that you have to provide the IP address, not a datagroup. The simple way is to create a snatpool and use the snatpool command to assign it.