For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

abettencourt_15's avatar
abettencourt_15
Icon for Altostratus rankAltostratus
Feb 23, 2018
Solved

Forcing APM/VPN traffic out a certain VLAN

I am using the APM VPN client with a Layer2 on a stick style setup (see below)   Right now i am using it with SNAT Pool: Auto Map, which means all the VPN connected users hide behind the VS IP add...
application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
  • abettencourt_15's avatar
    abettencourt_15
    Feb 27, 2018

    So looks like i got this working by just making a completely different partition and route domain, then in that partition doing the entire APM VPN wizard and then routing everything through the only available VLAN to that Partition. This way everything has to go to the core switch to get routed and i don't need to worry about anything asyncronous.

     

abettencourt_15's avatar
abettencourt_15
Icon for Altostratus rankAltostratus
Feb 26, 2018

I'm now thinking that perhaps re-creating the entire Access Policy and VS in a new VLAN, then making a new Routing Domain, and assigning that RD to the APM, thus forcing all the traffic through a VLAN unrelated to anything else. Going to try this and update.