Forum Discussion

IbereJr_135311's avatar
IbereJr_135311
Icon for Nimbostratus rankNimbostratus
Oct 09, 2013

Advanced Routing Problem

Hi (sorry about my poor english).. I have this scenario:

 

Two different internet connections, each with its own firewall / gateway connected to my internal network.

 

in my internal servers: each network stream that came through connection A are answered by default gateway (the firewall) each network stream that came through connection B are tagged in firewall B output interface firewall B with some TOS, and my internal servers have a Policy Based Routing, that change default route to firewall B when TOS = 0x2.. so everything works fine..

 

Is there any way to do this in F5? because all traffic to VIP that came through Firewall B will be answered to firewall A. .. and it does not work. (not even tcp handshake)

 

Thanks a lot... Iberê

 

3 Replies

  • You could setup a NAT rule on firewall B, and essentially NAT any traffic destined to the virtual server in question. Then when the LTM responds, it'll always go back to Firewall B provided the NAT address/pool routing is in place.

     

    This could probably be accomplished by using iRules as well, but it may be simpler to pursue the NAT solution.

     

    • IbereJr_135311's avatar
      IbereJr_135311
      Icon for Nimbostratus rankNimbostratus
      sorry.. if I understand well... in NAT solution, I will have 2 internal networks, each one with your own default gateway, and must configure this another network in all internal servers and in LTM too ? As I know.. I can detect TOS settings in iRules using IP::tos... do you know if I can set the default route ?
  • sorry.. if I understand well... in NAT solution, I will have 2 internal networks, each one with your own default gateway, and must configure this another network in all internal servers and in LTM too ?

     

    As I know.. I can detect TOS settings in iRules using IP::tos... do you know if I can set the default route ?