What is Secure NAT in F5?

--> A Secure Network Address Translation (SNAT) is a method that changes the source client IP address in a request to a translation address defined on the LTM.

--> Secure NAT changes only source IP address it does not change the source port number.

--> Secure NAT is basically used in one arm deployment method to prevent asymmetric routing.

--> By default, the LTM attempts to store the source port, but if the port is already in use on the selected translation address, the LTM also translates the source
port.



--> Each SNAT address, like an IP address has only 65535 ports available.

-->  If you require more than 65535 connections may require translation for one particular virtual server, you should configure more than one SNAT addresses (SNAT pool).

--> A SNAT pool is a group of translation addresses for a particular virtual server.

--> SNAT auto map automatically uses the egress interface IP address ( floating IP address ) for the translation.

Md.Kareemoddin ( CCIE # 54759)

0 Comments