Forum Discussion

dootyfree_24038's avatar
dootyfree_24038
Icon for Nimbostratus rankNimbostratus
Mar 28, 2012

ASM in DMZ

  I am new to F5 products, I am having trouble setting up my asm-3600 correctly in my dmz.     Setup as:     firewall > dmz > firewall     asm and content servers are in the dmz ...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Mar 28, 2012
Hi,

 

 

Can you clarify what you're stuck on?

 

 

If you can have the default gateway of the servers set to LTM, you could use virtual servers without serverside source address translation. If the servers have their default gateway pointed to the firewall or a router then you'll need SNAT on the virtual servers to ensure responses come back to LTM and then go to the clients.

 

 

Aaron