Forum Discussion

PeterRamage_314's avatar
PeterRamage_314
Icon for Nimbostratus rankNimbostratus
Nov 20, 2017

Source NAT on VS restricting to specific interfaces only.

Hi,   I have a BIG-IP with a bunch of interfaces, external, 10 x internal ones & a mgmt. I use an ip forwarding VS with SNAT to get out to the internet from the internal interfaces with a public N...
application delivery
BIG-IP
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Nov 20, 2017

You have to configure a forward virtual server with 0.0.0.0, and a more specific with the mgmt network as destination. Make sure you enable the virtual servers only in the internal networks.

 

This solution explains how the precedence works for virtual servers:

 

https://support.f5.com/csp/article/K14800

 

Just to provide the complete picture, this one explains all listeners:

 

https://support.f5.com/csp/article/K9038

 

You said you tried to create a more specific virtual server, and did not work. Review the solutions and try again. Post the configuration of your virtual servers here in the case does not work.