For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lkchen's avatar
lkchen
Icon for Nimbostratus rankNimbostratus
Jul 07, 2008

HA Domain Controllers

I've been asked to create a BigIP pool containing two Domain Controllers. Looking for HA, so Active/Standby is okay if load-balance isn't possible.     First question would be is this even...
microsoft
partner
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 16, 2008
If the client makes a request to the VIP but gets a response back directly from the DC, the client should drop the response as it's not coming from the IP it made the request from. You should be able to enable SNAT automap on the VIP to ensure the response goes back to the BIG-IP and the response to the client comes from the VIP address.

 

 

Aaron