For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Andre-Germany's avatar
Andre-Germany
Icon for Nimbostratus rankNimbostratus
Nov 06, 2018

FORWARDING Virtual Server in the same Network with default Router

I have the following situation, the F5 cluster, the servers and the default router are in the same network. Now the requirement is that the servers should see the original Sorce IP. Since the servers...
application delivery
LTM
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 06, 2018

A "router" implies that it's routing between separate subnets. And assuming you don't have a single physical path through the F5, the firewall can just respond directly to the server IP if that's the source address it sees. The simplest option is to SNAT the traffic but then of course you lose the source IP to the firewall.

 

You could also use a nexthop command in an iRule to force traffic to a VLAN and nexthop MAC (the firewall), but again that may not work in the reverse path.