How to configure One ARM setup with multiple VLAN

By definition, a One-Arm setup only has a single VLAN.

You do not have a one-arm setup. You have a single trunk, over which you will configure several tagged VLANs.

Each VLAN has non-floating and floating self IPs to match the network range associated with the vlan.

You will have multiple internal and external vlans defined.

Hi Steve Blakely,

Thanks for your reply. Would you help me to guide a setup scenario? I am building a F5 VE HA infrastructure. One F5 VE VM has four VMNICS, 2 for Management (VMNIC0 Active and VMNIC1 as standby) and 2 Production (VMNIC 2 primary and VMNIC3 as Standby).

Do I have to define individual Internal and External Interface for each Pool Members? Our real servers does not have a default gateway in the F5. As I told before the traffics are being forwarded via a policy based routing for only load balanced traffic to the F5 to their External floating self-IP addresses.

Example:

VLAN 10 (10.0.0.0/24) to External interface 1.1 and VLAN 100 (10.10.100.0/24) to Internal Interface 1.2

VLAN 20 (20.0.0.0/24) to External Interface 1.1 and VLAN 200 (10.10.200.0/24) to Internal Interface 1.2

net self IP_10.0.0.0 {

address 10.0.0.1/24

traffic-group traffic-group-local-only

vlan VLAN-10

}

net self IP_20.0.0.0 {

address 20.0.0.1/24

traffic-group traffic-group-local-only

vlan VLAN-20

}

net self IP_10.0.0.0 {

address 10.0.0.3/24

traffic-group traffic-group-1

vlan VLAN-10

}

net self IP_20.0.0.0 {

address 20.0.0.3/24

traffic-group traffic-group-1

vlan VLAN-20

}

AS the Internal VLAN can't have a default gateway on F5 since they are connected with the Cisco switch, what would be the Internal Interface setup look like? Will it be Just a tagged Interface with VLAN 100 and No "non-floating and floating Self-IP"?

My ultimate goal is to setup the F5 VE HA pair to act like an One ARM but having External and Internal VLAN are in different sub-netwrok. What would be my setup in this case?

Hi  ,

Thanks for your advise. I did setup the external and internal vlan as your told and also created self-ip and floating ip for each vlan. I also setup SNAT and it worked perfectly for me but it creates another issue. It could not preserve the Client's source IP address (We need to preserve it). If I take off the SNAT then it can't reach the Virtual server IP at all. I think an asymmetric routing occurred here but I could not find a solution to resolve it> Can you suggest me something?   

My Client IP = 10.10.100.100

My External VLAN10= selfip 1010.10.10, floating self-ip 10.10.10.12

My Virtual server = 10.10.10.50

My Internal VLAN20= selfip 1010.20.10, floating self-ip 10.10.20.12

My Nodes are on VLAN20= 10.10.20.21 & 10.10.20.22 (but their default GW IP 10.10.20.1 is at the L3 Switch, since these nodes and not directly connected to the F5). Both f5 and Nodes are VM hosts and are connected to a L3 switch.