For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TAC_AAL_342424's avatar
TAC_AAL_342424
Icon for Nimbostratus rankNimbostratus
Dec 02, 2017

CiscoACE to F5 Big IP LTM migration

Hi, I'm upgrading from Cisco ACE to BigIP LTM. My Cisco devices are in bridge mode, so I have to keep that config for LTM.   With the BigIP LTM I have done all my tests using a separate partiti...
application delivery
bridge
cisco ace
LTM
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Dec 02, 2017

You want cross-VLAN routing via BIG-IP LTM? Why not use Forwarding Type Virtual Server(s)? How many VLANs you have that must be able to communicate to one-another?

 

Bridged mode is never a goal in modern DC designs. I believe if you retain the functionality of cross-VLAN communication nobody will complain about your work.

 

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Dec 02, 2017

For reference, in case of many VLANs that need to be able to communicate to one-another, use a network mask to overlap them all (for the Forwarding Type Virtual Server). I have one client with 23 server-side networks that require cross-VLAN connectivity without restrictions. For that, in BigIP LTM, I have 23 VLANs, local-only and floating SelfIPs, and 1 Virtual Server to cover the requirement. Nothing else required. Ofcourse, this works best if your networks are all starting with same octet values, i.e. 172.16.x.x.