Skip to main content
gsharma
Staff
Staff
November 28, 2024

Technical Tip: How to Use Client Address to connect to pool

  • November 28, 2024
  • 0 replies
  • 884 views
Description This article describes how to use the Real IP address to connect to the Server Pool.
Scope FortiADC.
Solution

When using SLB L7, FortiADC will translate the Client IP address with the Interface IP address.

 

1interface.JPG

 

In Traffic logs, it can be checked under source IP address and Trans Source.

 

transtlog.JPG

 

This is because the Client Address under the Application Profile is Disabled.

 

clientadd.JPG

 

To use the Client IP address to connect with the Server Pool directly.

 

Navigate to: Server Load balance -> Application Resources -> Application Profile -> Open the profile Used -> Enable Client Address.

addressen.JPG

 

After enabling this, traffic logs can show the Source address and Trans Source as the same IP address.

 

tlognew.JPG
Note: This works only for the Server Load Balance type as L7. Also, Application profile type as FTP, HTTP, and TCPS only supports this Client address.

Related document:
Configuring Application profiles v7.4.7