Forum Discussion

Sammo_Li_81151's avatar
Sammo_Li_81151
Icon for Nimbostratus rankNimbostratus
Mar 31, 2015

Will there any conflict if the SNAT address same as one of the virtual server?

Hi,   I am translating a CSS configuration and there are some service have SNAT address that the same as virtual server IP. For example:   ltm virtual /Common/vs_mse1dr-snat { destination /...
APM
application delivery
design
LTM
security
bhs_114985's avatar
bhs_114985
Historic F5 Account
Mar 31, 2015

Hi Sammo,

 

I wouldn't call it best-practice but you should be ok. When the proxy opens up its server side connection using the virtual address as it's source, it will use a unique source port and tcp connection. client 1.1.1.1:1024 ---> VS 1.1.1.2:80 ---> VS (SNAT) 1.1.1.2:1024 ---> Real Server:port