Forum Discussion

AnkushP_222309's avatar
AnkushP_222309
Icon for Nimbostratus rankNimbostratus
Jan 14, 2016

NAT not working on AWS F5

We have a requirement where we want to NAT our server IP with F5 VIP IP. For that I have created a VS with Forwarding(IP) where source is my server subnet and destination as 0.0.0.0/0 and kept the SNAT as none.

 

I have also created a NAT list where I am natting the server IP with F5 VIP ip.

 

I have added F5 internal interface ip as gateway on my server.

 

NAT statics shows In traffic but no traffic on out. Need help to get the traffic through.

 

Note : Disabled the source/destination check on all interfaces.

 

Currently traffic is flowing like this -

 

IP 10.11.0.60.14000 > 172.23.189.11.57625: UDP, length 24

 

IP 10.11.0.60.14000 > 172.23.188.4.57625: UDP, length 24

 

IP 172.23.188.4.35510 > 10.11.0.60.14000: UDP, length 747

 

and is blocked here only.

 

We want

 

IP 172.23.189.11.35510 > 10.11.0.60.14000: UDP, length 747

 

BIG-IP
cloud

1 Reply

Sort By
  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jan 15, 2016

    HI,

     

    I think you should do either a forwarding virtual or a NAT list but not both, NAT list is automatically opening a socket on the bigip.

     

    Doing it simple test the virtual option with a snat automap, or with a snat pool if you want to fix your IP with a specific one.