Forum Discussion

ESS-Gamal_35193's avatar
ESS-Gamal_35193
Icon for Nimbostratus rankNimbostratus
Mar 05, 2018

Configure virtual server to allow server to access internet

hello every body , iam new with f5 so i need some advice regarding virtual server configuration to enable servers to reach internet to get updates i have deployed f5 with 2 arm deployment internal vlan 172.17.0.0/24 external vlan 172.16.0.0/16 server default gateway is self ip in internal vlan , while i can ping internet from this self ip , i can't from server i have configure virtual server(outbound) to allow traffic from internal vlan , do i have to do snat ?? keep in mind that f5 gateway is huawei firewall which do publish &nat for server

 

if i have to do snat which ip address i assign to nat pool kindly advice

 

application delivery
ASM Advanced WAF

1 Reply

Sort By
  • Martijn_van_de1's avatar
    Martijn_van_de1
    Icon for Cirrus rankCirrus
    Mar 05, 2018

    Hi,

     

    • Create a Forwarding-IP virtual server with destination 0.0.0.0/0.
    • Select Service Port 'All Ports'.
    • Select Protocol 'All Protocols'.

    This Forwarding-IP virtual server must be enabled on the VLAN of the servers needing the internet connection.

     

    If you have a firewall which is doing the NAT, SNAT is not needed.

     

    Regards, Martijn