Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

IRONMAN's avatar
IRONMAN
Icon for Cirrostratus rankCirrostratus
Sep 30, 2019

AFM acting as a Gateway !

In My setup, AFM connected to core and server farm connected to core. VLAN 2 configured for Server farm reach AFM inside interface as a gateway. AFM outside interface act as External .   My quer...
AFM
application delivery
LTM
security
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Sep 30, 2019

BigIP route traffic from one VLAN to another and doesn't matter if those VLANs share the same interface or not.

 

To allow routing through BigIP, you must create forwarding VS with destination network (ex : 0.0.0.0/0)

 

If you want to build different AFM policies based on incoming VLAN, you can create as many virtual servers as VLAN number:

 

  • virtual FWD_inside
    • type : forwarding IP
    • destination : 0.0.0.0/0
    • destination port : Any
    • protocol : Any
    • enable on VLAN : inside
    • AFM policy : Policy_inside
  • virtual FWD_outside
    • type : forwarding IP
    • destination 0.0.0.0/0
    • destination port : Any
    • protocol : Any
    • enable on VLAN : outside
    • AFM policy : Policy_outside
  • ...