F5 and its gateway

Question

Hi I made basic F5 configuration based on F5 protocol. But I notice there is not gateway config towards outside connection. For example, the virtual server in F5 send message out via &nbsp;its neighbor device. We do not need to define the neighbor device’s ip address at the F5. If so, F5 find the gateway through the incoming traffic, Is this correct? Thanks

mihaic · Answer

don't forget about auto last hop setting:https://support.f5.com/csp/article/K13876

mohamed_ahmed_kansoh · Answer

Hi&nbsp;davidy2001&nbsp;,&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;F5 do not need to define a gateway to it such as " servers , PCs , ... " , F5 needs only to main objects of configuration to make it alive in network ( Vlan and self ip " normal ip address from this Vlan subnet" )&nbsp;Lets simplify :&nbsp;&gt; we have F5 appliance and a Layer 3 Switch in front of.&nbsp;We need to connect both of devices with each other.&nbsp;I will talk about incomming traffic :&nbsp;&gt; Layer 3 Switch :&nbsp;- assign a physical interface&nbsp;- create VLAN and give it Tag 20&nbsp;- give this interface ip from vlan 20 subnet " lets say " 20.20.20.0/24" and Layer 3 switch take 20.20.20.2&gt; For F5 :&nbsp;- Create VLAN and give it TAG 20 as well , assign one of F5 physical interfaces on it&nbsp;- Create self IP address from Vlan 20 subnet lets say "20.20.20.3" and put Vlan_Tag 20 in it during its configuration.after that , both of devices can reach to other , now both of them at the same subnet.&nbsp;&gt; you can call the Layer 3 switch IP 20.20.20.2 as the Gateway of F5 it is up to you.&nbsp;&gt; After That you create a Virtual server , I know that Virtual server is Confusing you as you see that " Virtual server " is the only speaker with F5 Peer device :&nbsp;This Logically or as traffic flow is Correct , But Physically the self IP " 20.20.20.3 " in our example it the only component that maintains the reachability with its peer device.&nbsp;&gt; if you do not Put the Peer device and F5 in same Vlan and give them IP address , they can not take.&nbsp;&gt; There is no configuration in F5 to create a Gateway of Peer device but Logically you can call it " Layer 3 Switch is Gateway of F5 to go outside the network ".&nbsp;&gt; that was my explanation , you can specify your request and I will follow up your requests and try to get solution for you.&nbsp;Thank you&nbsp;

davidy2001 · Answer

Mohamed_Ahmed_Kansoh&nbsp;Thanks for your reply. I think its ok without defining gateway at the F5, but the case only can work only if the switch launch the process. Lets have simple diagram like this:&nbsp; &nbsp;Switch(layer3)---------F5-------NodesThe process is the switch launch the process and send traffic to F5. If F5 or node launch the process, the traffic would not know where to go, so it needs gateway pointing to the switch, right?&nbsp;

mohamed_ahmed_kansoh · Answer

Hi&nbsp;davidy2001&nbsp;,&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; Of course there is a known direction of traffic.&nbsp;&gt; Lets have " L 3 Switch --- F5 --- Nodes " scenario :&nbsp;- L3 switch direct its traffic to F5 because there is a " Route " specified on L3 Switch , this Route works as below :( If you want to reach to a virtual server hosted by F5 , send or throw the traffic on F5 self ip (next hop in routing ) "where F5 self ip and switch are connected and have ips in same subnet")&nbsp;- After That F5 will Process coming traffic and deliver this traffic to its internal nodes.&nbsp;&nbsp;&gt; Lets have " F5 , Or nodes " lunch the process of traffic :&nbsp;- For F5 lunches traffic to L3 Switch , to lunch traffic to Switch " let we say&nbsp; F5 needs to get updates from internet , so it must go through L3 Switch first , by creating a default route on F5 it self , this route says " if F5 want to send any traffic to its next hop and it will be L3 Switch interface in our Example)&nbsp;- For Internal Nodes&nbsp; , you first need to create new Virtual server on F5 to server Nodes traffic , in Case Nodes itself lunch traffic first , it must find a virtual server on F5 recieve its traffic.&nbsp;This Virtual server Can be standard , or another type of Virtual servers is widely used for nodes if it want to reach to internet for updates " this type of Virtual servers called " Forwarding ip ".&nbsp;- you know that nodes as a servers need to Configure a default gateway , to get out through it .&gt; Simply , Routing is main controller For Traffic direction or Flow , For F5 or Switch , both of&nbsp; devices get out based on its routes&nbsp;&gt; That was the traffic Flow from F5 perspective.&nbsp;Thanks and hopfully it helps you.&nbsp;Regards

psfletchthetek · Answer

I was going to say that, ti's saved many a issue for me!But its only helpful on incoming traffic, giving the f5 a chance of knowing where to send things back to.If you are trying to route to AD servers (for APM) or even radius servers then you'll ned to consider Netowrk &gt; Routes.And/Or the default routes used by the linux kernal / management interface.Also consider that management and TMM can both have default routes!

Forum Discussion

Recent Discussions

Changes to DO and AS3 GitHub - no longer monitored

URI-based Blocking vs. IP-based Ban in irules

ISP Link Load Blancing Use Case

migrate from serie I to R. Cluster LTM-GTM

shame on f5

Related Content

F5 NGINX Gateway Fabric - the One Gateway for AI-Powered Applications

IPv8 Would Fix My Routing Tables. It Will Never Ship.

WS-Shield: WebSocket Abuse Detection & Adaptive Enforcement Gateway

LLM Streaming Session Pinning for WebSocket AI Gateways

HTTP Request Smuggling, what it is, how to find it and how to stop it