Forum Discussion

flomkrl_29950's avatar
flomkrl_29950
Icon for Nimbostratus rankNimbostratus
Jan 25, 2008

Performance Layer 4 and SNAT

Hello,

 

 

Virtual Server type Performance Layer 4 is making SNAT with the default configuration on F5 with PVA.

 

 

Is it a way to desactivate the SNAT feature with this type of virtual server ?

 

I try to uncheck snat autorisation but after Virtual Server is not working.

 

 

Thanks in advance,

 

 

Regards,

 

 

Florian,

 

 

2 Replies

  • Hi,

     

     

    You should be able to not enable SNAT on a FastL4 VIP.

     

     

    When you say it doesn't work, what do you mean? What do you see in a tcpdump on the interface packets come in on and the interface packets should leave on? To capture a tcpdump when packets are using the PVA, make sure to specify the interface numbers, not the VLAN (SOL6546 Click here).

     

     

    Do you want responses to be sent back through the BIG-IP? Do they need to be in order to get the response back to the client? If the traffic can't be handled symmetrically (both request/response go through the same VIP), you should create a custom FastL4 profile with loose initiation and loose close enabled. Take a look at SOL5420 (Click here) for more details on the FastL4 profile settings options.

     

     

    Aaron
  • Thanks a lot,

     

     

    I understand now, maybe traffic i see with pva was the monitoring traffic from F5. I will make a tcpdump without pva;

     

     

    Regards,

     

     

    Florian,