For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
Sep 30, 2019

AFM acting as a Gateway !

In My setup, AFM connected to core and server farm connected to core. VLAN 2 configured for Server farm reach AFM inside interface as a gateway. AFM outside interface act as External .   My quer...
AFM
application delivery
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 30, 2019

BigIP route traffic from one VLAN to another and doesn't matter if those VLANs share the same interface or not.

 

To allow routing through BigIP, you must create forwarding VS with destination network (ex : 0.0.0.0/0)

 

If you want to build different AFM policies based on incoming VLAN, you can create as many virtual servers as VLAN number:

 

  • virtual FWD_inside
    • type : forwarding IP
    • destination : 0.0.0.0/0
    • destination port : Any
    • protocol : Any
    • enable on VLAN : inside
    • AFM policy : Policy_inside
  • virtual FWD_outside
    • type : forwarding IP
    • destination 0.0.0.0/0
    • destination port : Any
    • protocol : Any
    • enable on VLAN : outside
    • AFM policy : Policy_outside
  • ...