Forum Discussion
tolinrome_13817
Nimbostratus
Nimbostratusdoes vlan need interface assigned?
I have a VE LTM that is on the DMZ interface of the firewall but listens on two vlans (DMZ and inside). The self-IP is assigned to the inside vlan. The inside vlan has interface 1.1 assigned to it. T...
Thomas_Gobet_91
Cirrostratus
CirrostratusHi,
Bests deployment are when you use at least 2 arms (best on security).
For example with a single arm deployment, imagine if you're under DDoS attack. Even if you're F5 can protect your server from this attack, your monitors will be impacted because they use the same interface.
What you can do if you want to keep this 802.1q tag as a DMZ separator is to use trunk with two interfaces.
Keep in mind that if you want to use a cluster it's recommended to use a vlan dedicated for synchronization.
When I have to deploy new BIG-IPs for my customers, I usually use 3 interfaces or 4 if it's a cluster (1 for the MGMT, 1 for DMZ network, 1 for inside, 1 for HA).
tolinrome_13817Nimbostratus
NimbostratusSo for my understanding the way you set up the interfaces is with each their own vlan and no trunking on the interfaces?
