For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 28, 2010

Can you set Mutiple Networks for a Forwarding VIP?

Hi All,

 

 

Using Big-IP LTM 6900 ver 10.1.0 here.

 

 

Is it possible to set up multiple networks for a forwarding VIP.

 

 

For example we have three networks on Vlan 71 - 172.16.72.0/24, 172.16.73.0/24 and 172.16.74.0/24. I've created a forwarding VIP to Vlan 71 but can only see the option to add ONE network via the GUI. I need to bind all three networks to Vlan71? Is this do-able at all?? And if so, is it a matter of perhaps adding it via the command line to bigip.conf??

 

 

bigip.conf:

 

 

virtual INSIDE_VLAN71 {

 

ip forward

 

destination 172.16.72.0:any

 

mask 255.255.255.0

 

vlans Vlan_80 enable

 

}

 

 

Thanks.

 

 

Andy

 

config
design

2 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Mar 01, 2010
    You can just have a forwarder for each: 

     
 virtual INSIDE_VLAN71a { 
   ip forward 
   destination 172.16.72.0:any 
   mask 255.255.254.0 
   vlans Vlan_80 enable 
 } 
 virtual INSIDE_VLAN71b { 
   ip forward 
   destination 172.16.74.0:any 
   mask 255.255.255.0 
   vlans Vlan_80 enable 
 }

    If there is no route locally defined for 172.16.75.0/24 that should go elsewhere, you could also just summarize 172.16.72.0/22 as a single virtual, though this is less accurate and could cause problems for you down the road. It's an option though. Adding the virtual simply "allows" the traffic through, the routing for said destinations needs to be present for packets to flow.

  • hc_andy_35682's avatar
    hc_andy_35682
    Icon for Nimbostratus rankNimbostratus
    Mar 01, 2010
    Great idea!! Didn't think of using different VS for the different networks.

     

     

    I did think of using a /22 which we were lucky enough that 172.16.75.0/25 wasn't being used.

     

     

    Thanks for the reply.

     

     

    Cheers.

     

     

    Andy