Forum Discussion

Prasad21l's avatar
Prasad21l
Icon for Nimbostratus rankNimbostratus
Dec 13, 2024

BIG IP Link failover happen but i try to link fallback

I have used LTM-DNS with AFM on BIG IP. For Internet outgoing I used wildcard VS link failover happens when wan1 is down it goes to wan2 but I want to link fallback when WAN1 comes up again.  We no...
announcement
application delivery
event
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Dec 15, 2024

hi Prasad21l

 

Could you please share the configuration Flow. 
For me I expect you have a Firewall Sandwich solution > we called it like that when BIGIP sits down between 2 firewalls but in this case you have two routers instead of Firewalls. 

I will explain what I understood and let me know if I am correct: 

1- you have wildcard Virtual server >> Traffic goes through it to internet.

2- you have pool with two members ( Wan1 & Wan2 ) 

3- you are configuring a transparent health monitor , to monitor bother of links. 

 

So let me ask you here , do you use PGA "Priority Group Activation " on pool level or not ? 
I need to know the Configuration criteria of choosing the active link and when it marks it disabled. 

so let me know more about the context 

  • Prasad21l's avatar
    Prasad21l
    Icon for Nimbostratus rankNimbostratus
    Dec 16, 2024

    Hi  Mohamed,

    Thanks for the reply,

    Flow f5-->switch-->FW-->SW-->DMZ


    1- you have wildcard Virtual server >> Traffic goes through it to internet. ----- yes

    2- you have pool with two members ( Wan1 & Wan2 ) ---- yes

    3- you are configuring a transparent health monitor, to monitor bother of links. -- yes 

     

    No Priority Group Activation configured.

     

     

     

    • Mohamed_Ahmed_Kansoh's avatar
      Mohamed_Ahmed_Kansoh
      Icon for MVP rankMVP
      Dec 16, 2024

      very well, 

      I recommend using Priority group activation , please follow this article : https://my.f5.com/manage/s/article/K13525153

       

      this will let you leverage : 

      1- Fault tolerance on Pool members level ( WAN1 & WAN2 ) , for example this selects WAN 1 as the primary and active link whereas WAN2 is standby in case of failures in WAN1. 

      2- If an issue happened in WAN 1 "Active Link" , WAN 2 will carry over traffic , and when WAN 1 returns back , WAN1 will get the traffic again and WAN2 will be standby again automatically by default.
      By the way you can change this behavior and return traffic to WAN 1 manually if you wish in the future.

      3- Using this approach will give you the visibility and granular control for traffic flow.


      Try it and let me know.

  • Prasad21l's avatar
    Prasad21l
    Icon for Nimbostratus rankNimbostratus
    Jan 23, 2025

    Yes,  ISP Router --> F5-->SW(L2 for HA)-->FW-->SW-->DMZ

    Also enabled PGA with Less than 1 option.

    1- you have a wildcard Virtual server >> Traffic goes through it to the internet. --yes

    2- you have a pool with two members ( Wan1 & Wan2 ) -- yes 

    3- you are configuring a transparent health monitor, to monitor the bother of links --  we enabled monitor on the pool.

     

    Thanks

    Prasad