For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Mar 19, 2014

does vlan need interface assigned?

I have a VE LTM that is on the DMZ interface of the firewall but listens on two vlans (DMZ and inside). The self-IP is assigned to the inside vlan. The inside vlan has interface 1.1 assigned to it. T...
application delivery
deployment
design
LTM
management
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 19, 2014

You can technically do it both ways with no issues.

 

This comes down to a matter of personal (or company) preference/policy. Whether you separate vlans via tagging on a trunk or untagged on their own physical ports, the result will be the same. One advantage to dedicated interfaces is dedicated bandwidth. Could be a concern based on the utilization of the links.

 

  • tolinrome_13817's avatar
    tolinrome_13817
    Icon for Nimbostratus rankNimbostratus
    Mar 19, 2014
    I think I like the idea having their own physical ports, dedicated bandwidth, the tagging will take place on the core switch then.
  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Mar 19, 2014
    One vlan per physical port means untagged interfaces on the BIG-IP, and access ports (vice trunk ports) at the switch level (assuming Cisco standard terminology). This is probably the easiest way to go.