Forum Discussion

ReWrite_132188's avatar
ReWrite_132188
Icon for Nimbostratus rankNimbostratus
Jul 02, 2014

F5 BIG-IP answers with a self-ip that is not associated with that VLAN

Hi, I am working on implementing av proxy-solution with the help of F5 BIG-IP to do SSL-decrypt. In short: Users surf the web, and the traffic hits the F5 internal VLAN over a fiber-trunk(2.1 and...
application delivery
deployment
design
LTM
vlan
nitass's avatar
nitass
Icon for Employee rankEmployee
Jul 06, 2014

After the traffic has passed the proxy, it returns to the F5 on a different interface(1.2) and is Auto Mapped before being sent to the pool containing the internet facing router.

i do not see snat automap (source-address-translation { type automap }) in vs_proxy_return virtual server. are you using snat list for traffic from proxy? can you post the configuration?

 tmsh list snat (snat list name)

But for some reason it all stops when the proxy tries to send the traffic back to the F5 on Int 1.2. In the tcpdump I can see that the F5 is responding to requests from the proxy with the same self-IP that is defined on the internal VLAN that is assigned to the fiber trunk.

is the response of the request from proxy indeed? is tcp sequence and acknowledgment number correct?