For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AN's avatar
AN
Icon for Nimbostratus rankNimbostratus
Oct 20, 2020

Forwarding VSERVER (nodes and VSERVER in same subnet)

I have seen in ISE deployment guide they mentioned two different subnet to have Forwarding VSERVER for PSN node. as shown in below snapshoot:

 

 

But if we have ISE PSN node in same subnet as VSERVER how we would achieve forwarding VIP?

I have assign same IP as ISE PSN node on FORWARDING VSERVER and point PSN node to F5 SelfIP it worked, but when I restart PSN it wouldn't comeup since it tries to check if there is an existing IP in the network?

 

application delivery
BIG-IP
FORWARDING VSERVER
ISE PSN
LTM
vserver

1 Reply

  • James_Thomson's avatar
    James_Thomson
    Icon for Employee rankEmployee
    Nov 12, 2020

    Are you trying to forward traffic from the left side to the ISE-PSN servers? For example, the ISE-PAN-1 needs to talk directly to 10.1.99.5? If so, then you would configure a virtual server of type Forwarding (IP) that would have the address 10.1.99.0/24. You would probably want to enable it only on the VLAN98.