Forum Discussion

Cirrus

Apr 26, 2016

Do I need a self-ip in the same subnet as my virtual servers, or a VLAN ID?

Hi all. So my external self IP is in the 10.251.12.0/24 subnet and my virtual servers are in the 10.251.10.0/24 subnet. However, I can't ping any of my vIPs from the F5 itself or outside of that...

Historic F5 Account

That depends. You don't NEED one, but if you don't have one, then BOTH the BIG-IP needs a way to route to your server from a different self-ip, either via a route or the default tmm gateway (it can NOT use the management gateway), AND the server needs a route to the self-ip it receives the traffic from. If you are on the same subnet it is easy because you don't have to configure any routing.

As for VLANs, the logic is similar, you have to make sure the ingress/egress traffic have the same VLAN tag or disable VLAN-keyed connections (not recommended).

Theo_12742

Cirrus

Apr 26, 2016

There is no best practice--the flexibility of the platform is you can do either, and there are reasons to do both. I will say the simpler way is to create the Self IP.