Forum Discussion

hung_37471's avatar
hung_37471
Icon for Nimbostratus rankNimbostratus
Sep 27, 2011

How to config PBR

hi all     can you help me , how to config PBR on the BIg Ip ?     on the web GUI , i can't see anywhere to config PBR     thanks all      
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Aug 31, 2014

What I mean is traffic from a sample internal subnet 10.99.0.0/24 will go directly to Internet gateway, without being forwarded to VS 10.206.0.4:8080 at all. That traffic might be FTP, SSH, etc. Only port 80/443/8080 traffic from 10.1.0.0/24 and 10.2.0.0/24 has to go to the VS 10.206.0.4:8080 for further treatment by my App servers.

 

i am a bit confused. virtual server is destination listener object. it (virtual server) will be triggered only when traffic matches address and port configured in destination setting.

 

for example, only traffic destined to 10.206.0.4 and port 8080 will trigger 10.206.0.4:8080. other traffic won't match the virtual server.

 

sol14800: Order of precedence for virtual server matching (11.3.0 and later)

 

http://support.f5.com/kb/en-us/solutions/public/14000/800/sol14800.html

 

  • Sumanta_88744's avatar
    Sumanta_88744
    Icon for Cirrus rankCirrus
    Aug 31, 2014
    Hi Nitaas In my example, the end client is not hitting the virtual address directly. It just passes traffic through the F5 as a L3 hop. Based on the specified port 80/8080, the F5 redirects forward traffic to the virtual address and associated server pools. For rest traffic, the F5 is supposed to route to Internet gateway hop. I hope I could make it clearer.