For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 03, 2014

Access to same subnet than BIIG IP from SSL VPN

Dear,   I've a question about a basic design for SSL VPN   We've a remote Range (SSL VPN) 192.168.250.0/24   We have a BIGIP located in DMZ 172.16.1.0/24. In this DMZ I've multiple servers: ...
application delivery
design
LTM
security
ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
Jun 06, 2014

Hi All,

 

Finally found a good setup !

 

Here is what I tested yesterday...

 

  1. Define a new DMZ Zone on the Firewall (172.16.10.0/24)
  2. Define a new Interface on the F5
  3. Define a new Route Domain on the F5 a place the newly created VLAN into the RD.
  4. Use stric isolation in the RD
  5. Add a new defaut route into the route domain to point the new interface on the Firewall
  6. In APM assign the Route Domain after authenticated

Everything works fine with Route Domain

 

Thanks for your help

 

Belanger__Yves's avatar
Belanger__Yves
Icon for Altostratus rankAltostratus
Sep 19, 2016

Hi,

 

Do you use Proxy ARP or SNAT option?

 

Thanks, Yves