So what's the difference between 3 options? - option 1 & 2 seems the same but only Auto NAT / SNAT, the mechanism is still the same - For option 3, when do I need multiple SNAT IPs?
very good but you didn't explained exactly how the SNAT solves the problem of Asymmetric routing, the concept of SNAT is same as TWICE NAT(SRC & DEST NAT) which is common in firewalls or routers.
Hi Venkat, thanks for your positive comment. We are taking online classes for F5 LTM as of now. Will upload more as soon as feasible :) Cheers: uptimebits.com/
hello, I would like to ask, in the environment that I am working with, NAT-ing is perform from the firewall. In that case, would SNAT still required when I configure virtual server in f5? Usual setting for SNAT is we put auto-map. Kindly share your opinion on this.
Thanks for this video. When we are activating snat/snat pool /or auto map, this means that the backend server would not see the real source ip's !! this would be a problem in some cases! what is if i want to see the source ips from the clients ? how can i solve this ? thanks
You're welcome. In order to make it work, the default gateway of the servers should be F5's IP. Pls note, this is not a recommendation and its deployment dependent on your specific requirement or network design.
ASA placed between Router and LTM should not impact packet flow. Just ensure that it allows packets destined to Virtual IP+Port (e.g. 443) from Internet (or any other source within internal network). ASA being a stateful firewall, will allow response packets from LTM to client for which it allowed connection initially.
