For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jfh_142817's avatar
jfh_142817
Icon for Nimbostratus rankNimbostratus
Feb 03, 2014

Data Center Failover

Hi, Am looking for some advice on the following. I have two data centers with F5's in both . Data centers are connected/routed across 2 x 10G links using a dynamic routing protocol. They are going to...
design
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Feb 04, 2014

Yes, makes sense. Destination NAT but not source NAT.

 

So one way to do this as I mentioned above is to do conditional route advertisement. If you don't already have it, setup BGP between your external router and external firewall. You'll need to conditionally advertise a default route from your router to your firewall as long as your router is receiving the default from its ISP peer. You'll also need to have some kind of routing protocol configured on your external firewalls between your data centers to handle default route advertisement across the tunnel if the local ISP is unreachable.