Manual Chapter :
About AFM NAT Translation Objects
Applies To:
Show VersionsBIG-IP AFM
- 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0
About AFM NAT Translation Objects
AFM NAT translation objects
AFM NAT translation objects define the NAT mapping types, IP addresses, and service ports used to translate and map client connections between networks. AFM uses two types of translation objects; source translation and destination translation. Once the necessary source and destination translation objects are created, you can associate them with a NAT policy.
AFM NAT source translation objects
AFM NAT source translation objects contain a variety of static and dynamic NAT and PAT mapping types that translate the source IPv4 and IPv6 addresses and service ports of packets traversing the BIG-IP system.
Property | Description |
---|---|
Name
| A unique name for the source translation. |
Description
| Specifies descriptive text that identifies the source translation item. |
Type
|
|
Addresses
| Specifies the translation source IPv4 or IPv6 addresses available for allocation. All public source addresses come from this pool of IP address subnets. |
Ports
| Specifies the translation source service port or range of service ports available for allocation. All public source ports come from this pool of service ports. This option is not available when Static-NAT is the selected translation mode. |
ICMP Echo
| Enables or disables responses to ICMP Echo requests for translated source IP addresses. |
Proxy ARP
| Specifies whether AFM responds to ARP requests for translated source IP addresses.
|
Route Advertisement
| Specifies whether AFM advertises routes for translated source IP addresses using the BIG-IP system's advanced routing modules (enabled), or not (disabled). |
Egress Interface
| Lists interfaces over which source translation may or may not be allowed.
|
AFM Dynamic PAT options
When you select the dynamic PAT option as the source translation type, a variety of additional NAT mapping options become available.
Property | Description |
---|---|
PAT Mode
| Specifies which type of translation mapping is performed. Available options are:
|
Port Block Allocation options | These options are available when PAT Mode is set to Port Block Allocation .
|
Backup Addresses
| Available when PAT Mode is set to Deterministic . Specify additional backup addresses that may be used as translation addresses if DNAT mode fails deterministic translation. When this occurs, the fallback type is set to NAPT mode. |
Exclude Addresses
| Specifies the set of addresses excluded from translation IP addresses available in the pool. |
Mode
| Specifies the mapping mode for persisting translation entries, or how to preserve public IP addresses for clients from session to session. Available options are:
|
Timeout
| Specifies the mapping timeout period after the most-recent session where address:port X:x translated to X':x' on the public side, a timer begins. If the timer expires before X:x has another session, X' or x' may be used as the public side of another address:port. Use this parameter to set the timeout in seconds for addre |
InBound Mode
| Modifies the inbound-connection mode for incoming connections to translation endpoints. A translation endpoint is the public-side address and port (X':x') for a private-side address (X:x). You can enable the following algorithms for managing inbound co
|
Client Connection Limit
| This is the maximum number of simultaneous translated connections a client or subscriber is allowed to have. |
Hairpin Mode
| Enables or disables hairpinning for incoming connections.
When a client sends a packet to another client in the same private network, hairpin mode sends the packet directly to the destination client's private address. The BIG-IP system immediately translates the packet's public-side destination address. Rather than going out to the public network and returning later for translation, the packet takes a hairpin turn at the BIG-IP device. |
NAT Stats Profile
| Associate a NAT stats profile. |
PCP | A Port Control Protocol (PCP) client can set, or learn, its translated public-side IP address and service port. It can also set the IP address and service port of a third-party client. PCP is defined in RFC 6887. Available options are:
|
AFM destination translation objects
AFM NAT destination translation objects contain a variety of NAT modes and options to translate destination IP addresses and service ports of packets traversing the AFM system.
Option | Description |
---|---|
Name
| A unique name for the destination translation. |
Description
| Specifies descriptive text that identifies the destination translation item. |
Type
| Specifies the type of destination translation to use. The available options are:
|
Addresses
| Specifies the translation IPv4 or IPv6 addresses available for client allocation. This is a list of IP addresses and their subnet lengths. All addresses come from these IP address subnets. |
Ports
| Specifies service port or range of service ports used for destination translation. This option is not available when Static-NAT is selected. |