So what's the difference between 3 options? - option 1 & 2 seems the same but only Auto NAT / SNAT, the mechanism is still the same - For option 3, when do I need multiple SNAT IPs?
hello, I would like to ask, in the environment that I am working with, NAT-ing is perform from the firewall. In that case, would SNAT still required when I configure virtual server in f5? Usual setting for SNAT is we put auto-map. Kindly share your opinion on this.
Thanks for this video. When we are activating snat/snat pool /or auto map, this means that the backend server would not see the real source ip's !! this would be a problem in some cases! what is if i want to see the source ips from the clients ? how can i solve this ? thanks
You're welcome. In order to make it work, the default gateway of the servers should be F5's IP. Pls note, this is not a recommendation and its deployment dependent on your specific requirement or network design.
very good but you didn't explained exactly how the SNAT solves the problem of Asymmetric routing, the concept of SNAT is same as TWICE NAT(SRC & DEST NAT) which is common in firewalls or routers.
ASA placed between Router and LTM should not impact packet flow. Just ensure that it allows packets destined to Virtual IP+Port (e.g. 443) from Internet (or any other source within internal network). ASA being a stateful firewall, will allow response packets from LTM to client for which it allowed connection initially.
Hi Venkat, thanks for your positive comment. We are taking online classes for F5 LTM as of now. Will upload more as soon as feasible :) Cheers: uptimebits.com/
So what's the difference between 3 options?
- option 1 & 2 seems the same but only Auto NAT / SNAT, the mechanism is still the same
- For option 3, when do I need multiple SNAT IPs?
really appreciate your video about 3 different SNAT options.. will you be able to advise on the advantages over one another.
hello, I would like to ask, in the environment that I am working with, NAT-ing is perform from the firewall. In that case, would SNAT still required when I configure virtual server in f5? Usual setting for SNAT is we put auto-map. Kindly share your opinion on this.
Difference between snat and dnat load balancers please
Thanks for this video. When we are activating snat/snat pool /or auto map, this means that the backend server would not see the real source ip's !! this would be a problem in some cases! what is if i want to see the source ips from the clients ? how can i solve this ? thanks
You're welcome. In order to make it work, the default gateway of the servers should be F5's IP. Pls note, this is not a recommendation and its deployment dependent on your specific requirement or network design.
very good but you didn't explained exactly how the SNAT solves the problem of Asymmetric routing, the concept of SNAT is same as TWICE NAT(SRC & DEST NAT) which is common in firewalls or routers.
HI Just lets say if we have ASA in front end then what willbe the packet flow
ASA placed between Router and LTM should not impact packet flow. Just ensure that it allows packets destined to Virtual IP+Port (e.g. 443) from Internet (or any other source within internal network). ASA being a stateful firewall, will allow response packets from LTM to client for which it allowed connection initially.
easy to understand. thanks. can u pls upload more videos?
Hi Venkat, thanks for your positive comment. We are taking online classes for F5 LTM as of now. Will upload more as soon as feasible :) Cheers: uptimebits.com/
Good video man!
THANKS FOR SHARING TILL I WAS CONSIDERING SOURCE NAT..(SECURE)
You're welcome Nitin :) uptimebits.com/