F5 VSOutbound-主动出方向

Posted 2020-10-16

1. 配置了全局的SNAT后，VS可以选择fastL4或者ip forwarding，不需要配置Pool member

此时服务器可以ping通外网

F5上抓包

1. 没有配置全局SNAT，VS 配置automap

[email protected](localhost)(cfg-sync Standalone)(Active)(/Common)(tmos)# list ltm virtual outbound

ltm virtual outbound {

    destination 0.0.0.0:any

    mask any

    pool P_gateway

    profiles {

        fastL4 { }

    }

    source 0.0.0.0/0

    source-address-translation {

        type automap

    }

    translate-address disabled

    translate-port disabled

    vs-index 74

}