Forum Discussion

HerrDrachen's avatar
HerrDrachen
Icon for Altocumulus rankAltocumulus
Jun 26, 2023

F5 Appliance and Tenant in the DMZ

Good Afternoon, We are trying to implement an F5 appliance in the DMZ and I am probably not thinking about this correctly.  We think that the Data Interfaces (5.0 / 6.0) are LACP together into the DM...
application delivery
security
HerrDrachen's avatar
HerrDrachen
Icon for Altocumulus rankAltocumulus
Jun 27, 2023

Here is a simple layout of the F5, network, vmware and VMs.  The client would hit the F5, go through the switches to the VMware Hosts, hit the VMs that are in the pool, do what it has to do and then come back out the F5.

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jun 27, 2023

Hi HerrDrachen , 
your Question here is : 
if f5 bigip appliance need access to reach ( VM 1 , VM 2 ) ? 
The answer (yes) but if the "DMZ Vmware" depending on Access rules which look like firewall policies rules. 
So in this case you need to open access from (f5 bigip appliance selfip) on the internal vlan to reach ( VM1 and VM2 ) Pool members through DMZ VMware.

Note you need to configure ( SNAT auto map on virtual server configuration properities ). 

this is my primary analysis , please let me know if I miss somthing and clarify it more for me