F5 BIG-IP Config Assistance Needed

Posted By paja on 10/03/2008 12:12 AM

 

 

I'm not really sure about the other stuff you were talking about, I'm not using the CLI for this.

 

 

That is easy - actually it was excrept from config file:

 

 

1. create virtual server with destination as follows:

 

- Kind: Network

 

- Destination: 0.0.0.0

 

- Network mask: 0.0.0.0

 

- Service port: 0 (all services)

 

- Check advanced configuration:

 

- Type: forwarding (IP)

 

- Protocol any

 

- VLAN: enable on inside

 

 

This will ensure, that packet will traverse through VLANS as defined in routing.

 

 

2. Create virtual with address and netmask as in second example and enable it on outside VLAN. This will ensure that packet from outside will be routed to inside VLAN (directly connected network).

 

 

Of course, You can make single VS 0/0 and enable it on both VLANs, creating more VSs will give You more control about wat will be forwarded where.

 

 

Maybe You can do a few tcpdumps to check where You see the packets and where not.

 

 

 

Okay, now I'm -really- confused, more so than I was when I started. Why am I making virtual servers with 0.0.0.0? Shouldnt I be making a VS for 216.21.116.10 that uses a pool that includes the 10.100.116.10 node?