Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Feb 22, 2005

SNAT by VIP, not source

I have several pools of terminal servers behind the BigIP, but the BigIP is not the default gateway, so I need to translate the source. Currently, I'm using automap, but I would like to assign a snat to each vip. I'm not sure if I need rules to do this or not, but I couldn't get it to work with just snat configuration. For example, if I have vip 10.1.1.1 serving a pool of servers on 10.10.10.0/24, I'd like the source translation address to be 10.10.10.1, not the real on that subnet. Any direction would be appreciated.
application delivery
dev
devops
iRules

4 Replies

Sort By
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Feb 22, 2005
    Windows. I'm guessing the rule would need to look similar to this?

     

     

    iRule vip1_snat_assignment {

     

    when CLIENT_ACCEPTED {

     

    use snat 10.10.10.1

     

    }

     

    }
  • Brian_Gupta_115's avatar
    Brian_Gupta_115
    Icon for Nimbostratus rankNimbostratus
    Feb 22, 2005
    I don't think you need a rule. Create a SNAT address 10.10.10.1 in the networking section of the GUI. Then on the advanced properties of the VIP, select that SNAT.

     

     

    Cheers,

     

    Brian
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Feb 22, 2005
    The BigIP wouldn't let me create a second snat in the same vlan with the same source network (0.0.0.0/0), but I could create a single member snat pool and map this to each vip. That's great! Thanks.