For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 06, 2014

Hi All,

 

Finally found a good setup !

 

Here is what I tested yesterday...

 

  1. Define a new DMZ Zone on the Firewall (172.16.10.0/24)
  2. Define a new Interface on the F5
  3. Define a new Route Domain on the F5 a place the newly created VLAN into the RD.
  4. Use stric isolation in the RD
  5. Add a new defaut route into the route domain to point the new interface on the Firewall
  6. In APM assign the Route Domain after authenticated

Everything works fine with Route Domain

 

Thanks for your help

 

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Jun 09, 2014
Interesting, glad it works.