Forum Discussion
Can we have two different external VLANS on Active/Active Scenario
Hi All, Could we have the below setup working in Active/Active scenario in Version 11.5
Unit 1 (Active ) - External VLAN 10 Unit 1 (Active ) - Internal Vlan 30
Unit 2 (Active ) - External VLAN 20 Unit 2 (Active ) - Internal Vlan 30
Regards, Mohammed
3 Replies
So you're looking to have multiple traffic groups (2) running on two differnt external vlans? Sure, but assuming that you're wanting them to back eachother for those traffic groups, they'll need to be built on built out that way. It's all just a matter of how you split things up between the traffic groups.
Unit 1 (Active )
- External VLAN 10 (Active TG1)
- External VLAN 20 (Standby TG2)
Unit 2 (Active )
- External VLAN 20 (Active TG2)
- External VLAN 10 (Standby TG1)
- Kevin_K_51432Historic F5 Account
I believe the setup would more closely resemble:
Unit 1 (Active )
External VLAN 10 (Active TG1) Internal VLAN 30 (Standby TG2)
Unit 2 (Active )
External VLAN 20 (Active TG2) Internal VLAN 30 (Standby TG1)
It may work, but there could be problems. If for example, Vlan 10 were enabled on a VIP on Unit 1, when the object syncs to Unit 2, there's going to be an error because VLAN 10 doesn't exist there. It seemss better to have complete layer 2 parity.
Kevin
- John_Heyer_1508
Cirrostratus
I'd actually recommend putting both Traffic Groups on the same vlan, both for internal and external. Traffic Groups are ultimately pinned to IP addresses or Partitions so there's often no benefit to trying to pin them to vlans. It would just add more work both on the LTM and also the switch.
The only scenario I can see where it would be useful is if you're not running BGP and have different IP blocks dependent on different ISPs. Then there would be some kind of DNS management system like a GTM doing round-robin on both IP addresses.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com