Forum Discussion
Advanced Routing Problem
Hi (sorry about my poor english).. I have this scenario:
Two different internet connections, each with its own firewall / gateway connected to my internal network.
in my internal servers: each network stream that came through connection A are answered by default gateway (the firewall) each network stream that came through connection B are tagged in firewall B output interface firewall B with some TOS, and my internal servers have a Policy Based Routing, that change default route to firewall B when TOS = 0x2.. so everything works fine..
Is there any way to do this in F5? because all traffic to VIP that came through Firewall B will be answered to firewall A. .. and it does not work. (not even tcp handshake)
Thanks a lot... Iberê
3 Replies
- Cory_50405
Noctilucent
You could setup a NAT rule on firewall B, and essentially NAT any traffic destined to the virtual server in question. Then when the LTM responds, it'll always go back to Firewall B provided the NAT address/pool routing is in place.
This could probably be accomplished by using iRules as well, but it may be simpler to pursue the NAT solution.
- IbereJr_135311
Nimbostratus
sorry.. if I understand well... in NAT solution, I will have 2 internal networks, each one with your own default gateway, and must configure this another network in all internal servers and in LTM too ? As I know.. I can detect TOS settings in iRules using IP::tos... do you know if I can set the default route ?
- IbereJr_135311
Nimbostratus
sorry.. if I understand well... in NAT solution, I will have 2 internal networks, each one with your own default gateway, and must configure this another network in all internal servers and in LTM too ?
As I know.. I can detect TOS settings in iRules using IP::tos... do you know if I can set the default route ?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com