Forum Discussion
Bunty_384462
Nimbostratus
NimbostratusCan we swapped VIPs ip addresses in F5 ?
Hello All, I just would like to know can we swapped the VIPs ip address ?
For example
1.1.1.1 --> pool ---> servers(old) 2.2.2.2 ---> pool ---> servers (new)
I want to swap these two VIPs ip addresses with the same port. Can I do it ? Or F5 will give some warning when I will be doing the same like we can not have VIPs with same ip and same port ? Kindly suggest Thanks.
If I'm understanding your question correctly, you cannot have two VIPs with the same IP address and port. There is a precedence that the F5 uses when accepting network traffic:
- Existing session in session table
- Packet Filter
- Virtual Server (https://support.f5.com/csp/article/K14800)
- SNAT
- NAT
- Self-IP
- Deny
The third item on this list->Virtual Server has a precedence as well: https://support.f5.com/csp/article/K14800. That precedence would not allow two virtual servers to share the same IP address and port.
AceDawg1If I'm understanding your question correctly, you cannot have two VIPs with the same IP address and port. There is a precedence that the F5 uses when accepting network traffic:
- Existing session in session table
- Packet Filter
- Virtual Server (https://support.f5.com/csp/article/K14800)
- SNAT
- NAT
- Self-IP
- Deny
The third item on this list->Virtual Server has a precedence as well: https://support.f5.com/csp/article/K14800. That precedence would not allow two virtual servers to share the same IP address and port.
Bunty_384462Thanks for this information and your prompt reply AceDawg. But in my case how we can swap VIPs ip addresses in case we want to do the same. Kindly suggest.thx
- AceDawg1
Since you can't have two virtual servers with the same VIP and port, I would:
- Configure virtual server A with a fake IP address
- Configure virtual server B with the VIP address from virtual server A
- Configure virtual server A with the VIP address from virtual server
Let me know if this does/doesn't address your issue or if I'm misunderstanding.
- Bunty_384462
Thanks AceDawg ,even my understanding was the same like we need to use dummy ip to get this done. Thanks for your support. Cheers
AceDawg_204810Cirrus
If I'm understanding your question correctly, you cannot have two VIPs with the same IP address and port. There is a precedence that the F5 uses when accepting network traffic:
- Existing session in session table
- Packet Filter
- Virtual Server (https://support.f5.com/csp/article/K14800)
- SNAT
- NAT
- Self-IP
- Deny
The third item on this list->Virtual Server has a precedence as well: https://support.f5.com/csp/article/K14800. That precedence would not allow two virtual servers to share the same IP address and port.
- Bunty_384462
Thanks for this information and your prompt reply AceDawg. But in my case how we can swap VIPs ip addresses in case we want to do the same. Kindly suggest.thx
- AceDawg_204810
Since you can't have two virtual servers with the same VIP and port, I would:
- Configure virtual server A with a fake IP address
- Configure virtual server B with the VIP address from virtual server A
- Configure virtual server A with the VIP address from virtual server
Let me know if this does/doesn't address your issue or if I'm misunderstanding.
- Bunty_384462
Thanks AceDawg ,even my understanding was the same like we need to use dummy ip to get this done. Thanks for your support. Cheers