
Chapter 4: Configuring the High-Level Network
4-124
To configure SNAT global properties from the command
line
Configuring global properties for a SNAT requires that you enter three
bigpipe commands. The following command sets the maximum number of
connections you want to allow for each node using a SNAT.
b snat limit <value>
The following commands set the TCP and UDP idle connection timeouts:
b snat timeout tcp <seconds>
b snat timeout udp <seconds>
When adding a default SNAT for an active-active configuration, see Adding
automapped SNATs for active-active configurations, on page 4-129.
Configuring a SNAT manually
Once you have configured the SNAT global properties, you can manually
configure SNAT address mappings. When you map a SNAT manually, you
specify a particular translation IP address that you want the BIG-IP to assign
from any of the following:
• One or more specified node addresses
• One or more VLANs
• A combination of specified node addresses and VLANs
• All node addresses (known as a default SNAT)
Note that a SNAT address does not necessarily have to be unique; for
example, it can match the IP address of a virtual server. A SNAT address
cannot match an address already in use by a NAT or another SNAT address.
The following sections describe how to add a default SNAT and how to add
a SNAT manually for individual node addresses, VLANs, or a combination
of both.
Adding a default SNAT manually
If you do not want to configure a SNAT for each individual node, you can
manually create a default SNAT. When you add a default SNAT, you are
directing the BIG-IP to map every node on the internal network to a default
translation address.
Note
The following procedures do not apply to active-active configurations. For
information on how to add a default SNAT for an active-active
configuration, see Adding automapped SNATs for active-active
configurations, on page 4-129.
Kommentare zu diesen Handbüchern