Conditional SNAT + aFleX rule

Product Discussions aFleX
1

How to create an aFleX rule, where a connection started from a server_1 to the VIP can use the SNAT_1 IP address, and another connection started from another server_2 to the same VIP can use another SNAT_2 IP address??..
Is that possible.
Thank you very much

2

This can be accomplished without the need for an aFlex by creating SNAT Pools and ACLs, then applying them to the virtual server port. Here’s an example.

!

access-list 101 permit ip host 192.168.191.12 any
access-list 102 permit ip host 192.168.191.13 any

!

ip nat pool SNAT1 10.0.1.6 10.0.1.6 netmask /24
ip nat pool SNAT2 192.168.191.11 192.168.191.11 netmask /24

!
slb virtual-server SNAT_vs 10.0.1.20
   port 80 http

      name \_10.0.1.20\_HTTP\_80
      access-list 101 source-nat-pool SNAT1
      access-list 102 source-nat-pool SNAT2
      service-group SNAT\_sg

!

The less processing efficient way is to do it is in aFlex. Here’s an example.

when SERVER\_CONNECTED \{
  if \{ [IP::client\_addr] equals "10.0.1.5" \} \{

snatpool SNAT1

  \} elseif \{ [IP::client\_addr] equals "192.168.1.50" \} \{
                snatpool SNAT2 \}
\}

Hope this helps.