Forum Discussion

abeny_894's avatar
abeny_894
Icon for Nimbostratus rankNimbostratus
Apr 04, 2006

Internal server web access without using NAT/SNAT

Hello,

 

 

Good day, I would like to ask how to config the internal server be access to internet without using NAT/SNAT through Bigip?

 

 

Internal networks seems can't initialize connection from inside to outside? am i right?

 

 

Many thanks for somebody can help me.

 

 

Cheers

3 Replies

  • Abeny

     

     

    As far as I'm aware the BigIP should route your traffic without incident. However, the internal hosts will need to be using the BigIP as their default gateway, and the BigIP itself will have to have a default gateway pointing to the relevant next hop - a firewall I hope!
  • Thanks buddy,

     

     

    but how can do that? the IP address is not a internet IP, should use NAT/SNAT to translate it.

     

     

    Is there still has any method that the server can go to the internet without config NAT/SNAT in the Bigip??

     

     

    Many thx for your kindly help

     

  • We do this in one of our environments. The BigIP handles the applications, the firewall sitting in front of the BigIP handles the translations. If your BigIP is your public/private address border, then you will need to translate outbound requests. This can be done without iRules, reference the solutions guide on ask.f5.com.