Snat command, bigpipe

From NetworkStuff

A CLI command available on most F5 BigIP platforms; used to create, modify, display and delete SNAT translations.

Usage Syntax

bigpipe snat name [options]

Common options include;

• mirror [enable | disable] - enable or disable connection mirror between peers in a HA pair
• automap - create an automap SNAT (traffic will be NATted using the IP address of the BigIP interface it leaves through.)
• origin ip_address(es) (mask netmask) [add | delete] - specify origin (or original) source addresses that will be NATted by this SNAT
• translation ip_address - specify the translation IP address, the address the origin source address is NATted to
• snatpool pool_name - specify a SNAT pool that will be used for translation addresses (thus automap and translation cannot be used in conjunction with this option.)
• vlans [name(s) | all] [enable | disable] - specify VLANs this SNAT will be enabled or disabled on (relative to the VLANs origin addresses will arrive from/on.) The default is all
• [name | all] stats - display statistics for all or the specified SNAT
• [name | all] stats reset - reset or clear statistics for all or the specified SNAT

Usage Examples

bigpipe snat - display status and configuration information for all configured SNATs

bigpipe snat snat_one mirror enable - enable connection mirroring for the existing SNAT called snat_one

bigpipe snat snat_one mirror enable automap origin 10.15.15.2 vlan vlan_one enable - create an automap SNAT called snat_one used by origin address 10.15.15.2, enable connection mirroring and enable on vlan_one only

bigpipe snat snat_one origin 10.15.15.3 add - add a further origin address to the SNAT created by the command above

bigpipe snat snat_two origin 10.15.20.0 mask 255.255.255.0 translation 55.11.12.1 - create an SNAT called snat_two using a translated address of 55.11.12.1, used by origin addresses on the 10.15.20.0/24 network

Bigpipe Usage Notes

From v9.4, be aware of the administrative partition that is currently active; use the bigpipe shell partition command to display the current active partition name and the bigpipe shell partition name command to change partitions.

A full command manual can be displayed using the man command followed by the command name, for example: man pool or by suffixing the command name with the help keyword, for example; bigpipe pool help.

In most cases, the show keyword displays object status or statistics and the list keyword displays configuration. Remember, from v9.4, only objects in the currently active administrative partition will be displayed.

The bigpipe command can be abbreviated to just b (e.g. b help instead of bigpipe help.) Alternatively, (from v9.4,) you can use the bigpipe shell to enter commands without prefixing them with bigpipe.

Where curly or normal brackets {} or () or quotes "" or exclamation mark ! are required as part of a command and you are not using the bigpipe shell, they must be proceeded with a back slash \ to prevent the BASH shell from parsing them as system commands.

Don't forget to save your changes using the bigpipe save all command as necessary.

Typical Output

b snat show;

SNAT snat_outbound_test
|     (cur, max, limit, tot) = (11, 19, 0, 1165)
|     (pkts,bits) in = (7.712M, 3.353G), out = (18.62M, 31.20G)
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.50
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.52
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.55
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.86
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.87
+-> SNAT ORIG ADDR snat_outbound_test/11.12.1.90
+-> SNAT TRANSLATION 11.12.2.10
    |     (cur, max, limit, tot) = (30, 33, 0, 251)
    |     (pkts,bits) in = (133.1M, 57.65G), out = (254.0M, 446.0G)

Related Commands

The bigpipe snatpool command to create SNAT pools.

Use the bigpipe snat translation command to specify an idle timeout (and other parameters) for SNAT translation addresses.

Related Articles

Information on other F5 BigIP commands

Information on Linux commands

Information on Cisco commands

Information on Vyatta commands

Information on Force10 commands

Information on Arista commands

Information on Extreme commands

Information on Nortel commands

Information on Zebra commands

Information on Windows commands

Information on Secure Platform commands

Information on Blue Coat SGOS commands

Information on Nokia IPSO commands

We really do appreciate all feedback so please do send your comments, suggestions or corrections to steve#networkstuff.eu (replacing the # with an @)