Forum Discussion
rafaelbn
Sep 16, 2022Cirrostratus
Disabling Auto Last Hop on VLAN
Hello Guys! We have an internet facing LTM with public IPs. Currently, this LTM's default route points to a VRRP address (we have 2 routers for redundancy). On the same public VLAN, we have multipl...
- Sep 17, 2022
Changing that value will impact new connections, those connections already in the connection table will continue to return to the auto-last-hop setting established. You can do a couple things about that:
- Evaluate your virtual server tcp/udp profile timeout settings for those virtuals served on that particular vlan and if you are not supporting any seriously long-lived connections, you could set the idle timeouts artificially low temporarily to bleed old connections off safely, then clear any remaining connections to the virtuals in that vlan. This would be less impactful
- Make no changes to your idle timeouts, and wait until immediately before your routers, then clear the connections on the virtual servers being served on that vlan. You can script it if there are too many to clear manually. This would be more impactful.
JRahm
Admin
Changing that value will impact new connections, those connections already in the connection table will continue to return to the auto-last-hop setting established. You can do a couple things about that:
- Evaluate your virtual server tcp/udp profile timeout settings for those virtuals served on that particular vlan and if you are not supporting any seriously long-lived connections, you could set the idle timeouts artificially low temporarily to bleed old connections off safely, then clear any remaining connections to the virtuals in that vlan. This would be less impactful
- Make no changes to your idle timeouts, and wait until immediately before your routers, then clear the connections on the virtual servers being served on that vlan. You can script it if there are too many to clear manually. This would be more impactful.
rafaelbn
Sep 19, 2022Cirrostratus
Thanks Jason!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects