For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Marieme's avatar
Marieme
Icon for Cirrus rankCirrus
Nov 22, 2018

BIG IP Virtual Edition 13.1.1 Installation & Configuration

Hello I have some services that i need to published on an intranet. My environement is composed with intranet, firewall, BIG IP virtual Edition, and servers . The layer 3 routing is on the firewall. Below are my questions: do i need to create involved dedicated vlan of applications published? how can i create specific partition on my BIG IP VE? Also how can i configure HA for my cluster devices? Platform is LTM

 

Thanks in advance for your reply

 

Marieme

 

AAM
application delivery
BIG-IP

1 Reply

  • Philip_Jonsson's avatar
    Philip_Jonsson
    Icon for MVP rankMVP
    Nov 23, 2018

    Hello Marieme

     

    Do I need to create involved dedicated vlan of applications published?

     

    Well this depends on how your network design looks. You can use the BIG-IP in a One-arm mode where your traffic will work in the following way:

     

    Incoming Traffic

     

    -> [Firewall] -> [BIG-IP] -> [Firewall] -> [Servers]

     

    Return Traffic

     

    -> [Servers] -> [Firewall] -> [BIG-IP] -> [Firewall]

     

    In this case you are forced to use SNAT in order to translate the source IP address to one that is owned by the BIG-IP device.

     

    So no, you're not forced to create additional VLANs and have the pool members directly attached to the BIG-IP.

     

    How can I create specific partition on my BIG IP VE?

     

    Manual Chapter: Working with Partitions

     

    Also how can i configure HA for my cluster devices?

     

    Manual Chapter: Creating an Active-Standby Configuration Using the Setup Utility

     

    I hope this helps! :)