Forum Discussion

Miron_du_Plessi's avatar
Miron_du_Plessi
Icon for Nimbostratus rankNimbostratus
Sep 12, 2008

Internal to External Flows

Hi,     Can anyone confirm how LTM handles flows from internally defined nodes which use the LTM as its gateway.     For example a web server that needs to communicate to an NTP ...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Sep 12, 2008
Yes, LTM is a default deny device. You either need to SNAT or NAT internal connections to an external IP address, or use a wildcard forwarding virtual server (0.0.0.0:0) to allow the traffic in and out. If any NetBIOS is involved the NAT/SNAT method probably won't work, so I tend to prefer the forwarding virtual method. When using that, the LTM's gateway will likely need a static route to the network behind LTM pointing to the LTM's external address (floating address for redundant pairs).

 

 

Denny