Forum Discussion

tolinrome_13817's avatar
tolinrome_13817
Icon for Nimbostratus rankNimbostratus
Mar 19, 2014

does vlan need interface assigned?

I have a VE LTM that is on the DMZ interface of the firewall but listens on two vlans (DMZ and inside). The self-IP is assigned to the inside vlan. The inside vlan has interface 1.1 assigned to it. T...
application delivery
deployment
design
LTM
management
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 19, 2014

You can technically do it both ways with no issues.

 

This comes down to a matter of personal (or company) preference/policy. Whether you separate vlans via tagging on a trunk or untagged on their own physical ports, the result will be the same. One advantage to dedicated interfaces is dedicated bandwidth. Could be a concern based on the utilization of the links.

 

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 19, 2014
One vlan per physical port means untagged interfaces on the BIG-IP, and access ports (vice trunk ports) at the switch level (assuming Cisco standard terminology). This is probably the easiest way to go.