For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Hi,

 

@What Lies Beneath Yes of course F5 is the VPN Termination point... Virtual Server is 172.16.1.100 which is in the same subnet than the DMZ...

 

That's why I'm getting asymetric routing... First packet is sent directly (via the VPN to the F5) and then the answer is sent back from the server via the Firewall which doesn't have any opened session...

 

@iRuleYou Everything works fine with SNAT or Automap on the VS but in this case I'm not able to identify the orgininal IP (192.168.250.x)...

 

I also had a look to Route Domain but not able to find a correct solution

 

Thanks for your help

 

Nicolas