F5 Virtual appliance - VLAN Management

The VLAN's you want the F5 VE to communicate with the Internet must be set to NAT in Vmware. By default the PC address in the network is .1. When using NAT the route to the Internet is via .2.

For example an external vlan you might set it to host-only because it does not require any Internet access. This will be requests generated by you sent to VIP's on the BIGIP. Then the internal vlan would be set to NAT and a default route created on the BIGIP that points to .2 address. This means your bigip can not only reach services on your PC via .1 it can also reach servers beyond your PC via .2 using the default route.

There really is no need to have the management address available externally to the PC if you are the only person using it so I recommend Host only.

Sample Addressing - First Interface assigned to VM (Host only)
Management (eth0)
Existing

External VLAN (1.1) - Second Interface assigned to VM (NAT)
PC 192.168.74.1
SelfIP 192.168.74.10
Default Route to 192.168.74.2

Internal VLAN (1.2) - Third Interface assigned to VM (Host Only)
PC 192.168.87.1
SelfIP 192.168.87.10

Thanks Kevin,

I have configured interfaces as you've suggested. And I can access the appliance using the Management IP address and Internal VLAN self IP address. However I don't have internet access from the F5 console.

The default route is pointing as 0.0.0.0/0 => 192.168.20.1 (InternalVLAN IP address).

Management (Host only) 192.168.10.0/24

External VLAN (1.1) - (NAT) 192.168.20.0/24

Can reach 192.168.20.1 successfully.

Internal VLAN (1.2) - (Host Only) 192.168.30.0/24 Cannot reach 192.168.30.1

I am sure I made a configuration mistake somewhere. As I don't internet access from F5, and none of the Host-only interfaces are reaching their gateway, .1

Can you correct?

I have uploaded the interface configuration image for your reference, if that helps.

https://cloud.helpag.com/public.php?service=files&t=ab59103f7ca946945c14dcbeaefe11d2

Thanks, Darshan

Thanks Kevin,

I think in VMware workstation, it is default option to create an adapter for host based interface, and I have verified it again and found it is available in my network settings.

However I didn't get the idea of the default route for NAT interface? I have 1.1 (External) interface configured as NAT, and unfortunately my F5 still doesn't have access to the internet.

Is there anything to be considered?

Cheers!

Is your default route now pointing to 192.168.20.2?

Hey Kevin,

Guest what! It is working after pointing the default route to 192.168.20.2

Perfect! Thank you very much!!

Sure, I did that. :)

Thanks for bringing it to my notice, I will follow this in future.

Cheers!