For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hendroes_217893's avatar
Hendroes_217893
Icon for Altostratus rankAltostratus
Feb 09, 2017

Asymmetric routing F5 (different Inbound and outbound traffic)

Hi,

 

I tried to make asymmetric routes in F5. Traffic will come from Router A from internet, and will send it back through Router B.

 

I have read about the auto last hop that make the route to go back to the last source mac address. Is it true?

 

What should I do to make this happen?

 

application delivery
LTM

1 Reply

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Feb 09, 2017

    Hi Hendroes,

    the 

    auto-last-hop
    feature is enabled by default and causes the F5 to use the 
    SRC_MAC
    of the received connection as the next-hop MAC address while sending data through this connection.

    If you disable the 

    auto-last-hop
    feature either globaly or individually on certain configuration object, the F5 will fallback to its L3 routing table to locate the next-hop mac while sending outgoing data through this connection.

    In addition to that you can write some iRule to specify the next hop programatically based on every criteria you can think of and even more (via 

    [nexthop]
    command). This is Policy-Based-Routing (PBR) on steriods! 😉

    For further reading: https://support.f5.com/csp/article/K13876

    Cheers, Kai