201 · Question #306
A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other…
The correct answer is C. Floating self IP address on VLAN where the packet leaves the system. A specific SNAT object configured to match the client's source IP takes precedence over SNAT automap configured on the virtual server, translating the source IP to the floating self-IP of the egress VLAN.
Question
A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member?
Options
- A200.200.1.1
- B150.150.10.11
- CFloating self IP address on VLAN where the packet leaves the system
- DFloating self IP address on VLAN where the packet arrives on the system
How the community answered
(32 responses)- A25% (8)
- B6% (2)
- C59% (19)
- D9% (3)
Why each option
A specific SNAT object configured to match the client's source IP takes precedence over SNAT automap configured on the virtual server, translating the source IP to the floating self-IP of the egress VLAN.
The source IP would be translated because both a specific SNAT object and SNAT automap are configured, ensuring the client IP is not preserved.
150.150.10.11 is the identifier for the specific SNAT, but the actual source IP used for outbound connections by such a SNAT, unless a SNAT pool is explicitly defined, is the floating self-IP of the egress VLAN.
Although the virtual server has SNAT automap, a specific SNAT object is also configured to match the client's source IP (200.200.1.1). Specific SNAT configurations take precedence over SNAT automap, and when a specific SNAT object is used without an explicit SNAT pool, it typically translates the source IP to the floating self-IP address of the VLAN through which the packet exits the BIG-IP system.
The source IP used for translation is determined by where the packet leaves the system (egress VLAN), not where it arrives (ingress VLAN).
Concept tested: SNAT precedence and automap behavior
Source: https://support.f5.com/csp/article/K7820
Topics
Community Discussion
No community discussion yet for this question.