SNAT descision based on client ip and link availability

The logic looks fine. You could use IP::addr to perform the IP address comparison:

 
 when LB_SELECTED { 
    if {[matchclass [IP::client_addr] equals "$::Hosts"}{ 
       if {[IP::addr [LB::server addr] equals 128.94.240.254]}{ 
          snat none 
       } else { 
          snat automap 
       } 
    } else { 
       snat automap 
    } 
 } 
 

Aaron

Thanks hoolio.. With this rule in place, what Address Translation settings should I configure for the outbound virtual server?

The address translation checkbox in the VIP properties in the GUI refers to destination address only. If you have a network VIP (a VIP with a destination address that does not have a mask of 255.255.255.255) you'll need to leave address translation disabled so LTM doesn't try to change the destination address on the packets.

 

 

Because the iRule is setting SNAT in all cases, the SNAT setting on the VIP will be overridden by the iRule so that property doesn't matter. I think you would need to have SNAT enabled on the gateway pool in order for the iRule SNAT to be used.

 

 

Aaron

Along these same lines... Don't mean to hijack your thread, but it seems related...

I am working on some link controllers handling traffic for a datacenter and office with 50 or so users. They have a main connection (about 30Mb/s) and a backup T1. I have this configured using priority group activation so the T1 is only used when the main connection is down, and everything seems to be working as expected.

Now, if/when the main connection goes down, they do NOT want normal user traffic to pass the outbound network VIP. They want to make sure all of the bandwidth on the backup T1 will only be used for "real service traffic", and not just local users surfing Yahoo!

My idea is to create an iRule on the outbound network VIP that looks at the IP of the node in the default_gateway_pool that was chosen, and if it's the backup T1's IP, then just drop the traffic. Does that sound like a reasonable way to handle this situation? Anyone have any better ideas? Here is what I have for the current iRule...

when LB_SELECTED {  
        if {[IP::addr [LB::server addr] equals            drop  
        }  
  }

Thanks in advance...

--brice