For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SulemanTajik's avatar
SulemanTajik
Icon for Nimbostratus rankNimbostratus
Oct 26, 2017

How can we create P2P route b/w L3 upstream device and F5 for routing external traffic ?

Internal Servers are on 192.168.x.x/16 subnets and 30 vlans with their corresponding self ip and floating ip for 30 applications are configured as internal network. Similarly 30 no of VIPs/floatin...
application delivery
BIG-IP
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Oct 30, 2017

It is not a common setup, but yes you can have just a single VLAN for routing. You need one or more IPs for the WAN route, depending if a single device or not. For the F5s, you need 2 non-floating IPs, and 1 floating IP.

 

Basically, in the WAN router you create routes to point all 30 networks to the F5 floating IP. All virtual servers should be configured to expect traffic from the routing VLAN. In that case, WAN route only needs an interface (or more) in the routing VLAN.

 

If the servers have the default gateway to the WAN router, you need to use SNAT as well to make sure traffic returns via F5.

 

SNAT information:

 

https://support.f5.com/csp/article/K7820