For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Prasad21l's avatar
Prasad21l
Icon for Nimbostratus rankNimbostratus
Dec 13, 2024

BIG IP Link failover happen but i try to link fallback

I have used LTM-DNS with AFM on BIG IP. For Internet outgoing I used wildcard VS link failover happens when wan1 is down it goes to wan2 but I want to link fallback when WAN1 comes up again.  We no...
announcement
application delivery
event
security
Prasad21l's avatar
Prasad21l
Icon for Nimbostratus rankNimbostratus
Dec 16, 2024

Hi  Mohamed,

Thanks for the reply,

Flow f5-->switch-->FW-->SW-->DMZ


1- you have wildcard Virtual server >> Traffic goes through it to internet. ----- yes

2- you have pool with two members ( Wan1 & Wan2 ) ---- yes

3- you are configuring a transparent health monitor, to monitor bother of links. -- yes 

 

No Priority Group Activation configured.

 

 

 

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Dec 16, 2024

very well, 

I recommend using Priority group activation , please follow this article : https://my.f5.com/manage/s/article/K13525153

 

this will let you leverage : 

1- Fault tolerance on Pool members level ( WAN1 & WAN2 ) , for example this selects WAN 1 as the primary and active link whereas WAN2 is standby in case of failures in WAN1. 

2- If an issue happened in WAN 1 "Active Link" , WAN 2 will carry over traffic , and when WAN 1 returns back , WAN1 will get the traffic again and WAN2 will be standby again automatically by default.
By the way you can change this behavior and return traffic to WAN 1 manually if you wish in the future.

3- Using this approach will give you the visibility and granular control for traffic flow.


Try it and let me know.