Forum Discussion

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 06, 2016

Hello,

If you can reach the F5 or the F5 can reach all required resources without any default gateway, it's fine, no need to add a route. Otherwise, you will need to add a default route on Network >> Route or using a tmsh command :

create /net route 0.0.0.0/0 gw 30.99.99.254

No need to take care of the route domain. If you don't specify any route domain in the route configuration it's a route used within route domain 0.

  • Sarah_258804's avatar
    Sarah_258804
    Icon for Cirrus rankCirrus
    May 06, 2016
    I am able to reach everything that I need to from the F5, but how do I know which interface it's communicating on? I want to be sure it's not relying on my management IP address.
  • Micros_88999's avatar
    Micros_88999
    Icon for Nimbostratus rankNimbostratus
    May 06, 2016
    If its the reply (for a client hitting a virtual server f/e), then f5 using the Auto Last Hop feature. Nor replies it wont use the management interface.
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 06, 2016
    Simple, if the destination you try to reach is directly connected to the F5 by a Self IP, it's fine. If you are able to reach a destination that is not directly connected, the traffic probably use the management port. To make sure, you can launch a tcpdump command on the cli and see if there is traffic outgoing to the mgmt
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 06, 2016
    You can use the following : tcpdump -s 0 -vvv -i eth0 host your_destination_ip