Forum Discussion
kuldeep_Thakur_
Nimbostratus
Jul 18, 2012F5 is replacing source address of my servers with floating self ip of engress vlan
HI guys i am new to f5 so dont knwo if i have configured it correctly or not . I have two Vlan's configured on My F5 . Engress Vlan(115) and Ingress Vlan(114). My servers are on Ingress Vlan and Cline...
nitass
Employee
Jul 19, 2012bigip is a default-deny device. to allow traffic from one vlan to another, at least one listener object has to be configured. there are 3 listener object types which are virtual, snat, nat.
since you do not need snat/nat, can you delete snat and create 2 virtuals; one for incoming and the other one for outgoing? because outgoing virtual is ip forwarding virtual, do not forget to add default route on bigip.
e.g.
[root@ve10:Active] config b virtual list
virtual vs_incoming {
pool pool_server
destination 172.28.19.79:80
ip protocol 6
profiles {
http {}
tcp {}
}
}
virtual vs_outgoing {
ip forward
destination any:any
mask 0.0.0.0
}
[root@ve10:Active] config b route list
route default inet {
gateway 172.28.19.254
}
[root@ve10:Active] config b snat list
No SNATs were found.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects