Forum Discussion

ESDRAS_368680's avatar
ESDRAS_368680
Icon for Nimbostratus rankNimbostratus
Aug 01, 2018

Allow Internet Access from Internal Hosts on VLAN internal

Hello, I'm new with F5 BIGP and i want to permit to my hosts on INTERNAL VLAN to access Internet throught the EXTERNAL VLAN, like an Internet gateway. On my f5 BIGIP I have these configurations: Model is : F5 BIG IP i2600 I added PORT 6 (SFP+ 2) ton EXTERNAL VLAN (Public IP : 4x.x.x.x) and PORT 5 (SFP+ 1) to INTERNAL VLAN (10.100.251.86/24) I have added default route to my ISP Router. When I Connect via SSH to F5BIG IP i can ping 8.8.8.8 But when I configure a host on INTERNAL, using INTERNAL VLAN as a Gateway i can ping the public IP on External Vlan, but can't ping hosts on internet or make web browsing.

 

Can I have helpe to resolve this problem.

 

Thanks.

 

application delivery
ASM Advanced WAF
BIG-IP
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Aug 01, 2018

    The LTM is a default-deny device, so it will not route traffic without a virtual server/listener.

     

    You need to create a forwarding virtual listening on 0.0.0.0/0 on the internal vlan and set the internal hosts to use the INTERNAL floating self-ip as their default route.

     

    K7595: Overview of IP forwarding virtual servers