For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bob_10976's avatar
Bob_10976
Icon for Nimbostratus rankNimbostratus
Mar 27, 2008

Can't use Remote Desktop to Web Servers

Just to let you know I did't set this up, I pretty much inherited everything and on top of that I'm a bit new to BigIP.     I cannot use remote desktop, (RDP) to connect to my webservers behind ...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Mar 27, 2008
BIG-IP is a default deny box, so if it isn't configured to pass specific traffic, it won't. So there needs to be either a NAT that directly maps an external address to each internal webserver that you want to connect to, or a forwarding virtual server that allows the BIG-IP to route traffic to its internal network.

 

 

I typically prefer the forwarder over NAT'ing (the easiest way is to just create a wildcard forwarder - a virtual server using the network option, 0.0.0.0, port 0, and change the Type from Standard to Forwarding(IP), and change the protocol from TCP to All Protocols). Your core router will most likely need a static route pointing towards the BIG-IP as the next hop to your internal network.

 

 

Hope that helps,

 

Denny