Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

SanYang's avatar
SanYang
Icon for Cirrostratus rankCirrostratus
Mar 18, 2026

About vlangroup traffic

Hello Expert,

 

I’ve recently been trying out VLAN groups in a test environment.

This is my environment.

I’ve found that on the F5, there’s no need to configure any Virtual Servers;

client(1.1.1.10) can connect successfully to Server:443(1.1.1.20).

I set up an ForwardingL2-type virtual server, but no traffic is through the Virtual Server; instead, it goes through the VLAN group.

 

 

Why isn’t the traffic being routed through the VS?

 

 

 

 

 

 

 

 

 

 

 

3 Replies

  • Can you please provide the routing and interface configuration for your F5? My best guess is these interfaces have an IP from the same subnet so it knows how to route from one to the other or the VLAN is the same so they can communicate with each other.

  • what are the subnet masks?

    f5 can be l2 switch and l3 router too.

    however despite the hardware looks like switch/router,
    things will be more manageable if you treat f5 as application layer server and use it in reverse proxy mode, i.e make it one arm and put it in app server's subnet.

  • A vlangroup is a bridge. You do not need a VS in this setup. My proposal: do not use vlangroups.