F5 Link Controller (for VPN & soource base routing)

 

Hi,

 

 

I have a requirement to configure iRule for a BiGIP link controller...kindly help as I am new to iRule world.

 

 

The setup is like this... I have 2 Routers connected to Internet links, after Router I have BigIP LC (link controller) which connects to 2 inside firewalls (F1--ASA)& (F2--PIX)then L3 switch.

 

 

The F1 has configured with static NAT & site to site VPN configuration.

 

 

The F2 is connected to a L3 switch which has VLANs & subnets configured i.e 10.100.42.0, 10.100.43.0, 10.100.44.0 gw f2.

 

 

The requirement is as mentioned below:

 

 

1) for F1....internet users connected to F1 should be able to browser Internet & should connect to other site via VPN.

 

 

2) F2...The users connected vis F2 should be able to browse outside with specific ISP link with specific inside source subnet...for example, (F2 has no NAT configured)SNAT will be in F5.

 

 

source subnet 10.100.42.0----Link-1.

 

Source subnet 10.100.43.0----link-1.

 

Source subnet 10.100.44.0----link-2.

 

 

Please help me to configure to work VPN

 

form Firewall-1 (f1)on link controller with ISP1 only...2nd source based routing for firewall-2 (f2).

 

 

Please contact me in case of any information needed.

 

 

Thanks & Regards,

 

 

Arshad Khan

 

 

email: arshad@transition-asia.com

 

 

Phone: +91 9818185662