Forum Discussion
drhawkings_2156
Nimbostratus
Aug 14, 2011How to create full HA for WAN switch in 2 active-passive F5 LC?
Currently both F5 (active-passive) are connected to 2 ISP router.
Since both F5 needs connectivity to both ISP router 1 and 2, the connection is mesh from both F5 to both routers via a single WAN switch.
However the design is vulnerable due to only a single switch. How can I migrate the configuration to 2 WAN switches?
What config in F5 that i need to do? Tagging? How about WAN switch/router side?
Attached is the current design.Appreciate any advice!!!
4 Replies
- Bart_18836
Nimbostratus
Sounds fairly easy, you just need to configure second switch with same vlans on an uplink toward Bigip (trunk) as you had on a single switch. Migration is easy, although you will have to run on a single device for a moment. I actually did that with forcing standby unit to go offline first, moving cabling to new switch and then reactivating it as standby again. PS. I do not see attachment you mention - drhawkings_2156
Nimbostratus
Hi, attach is the design. I heard the solution is to tagged to the interface going to the WAN swicth but what will happen if a port is tagged & untagged at the same time?
Currently the ports going to 2 ISP routers are untagged with individual VLAN.
Thanks!! - drhawkings_2156
Nimbostratus
I heard that tagging the F5 ports going to the the ISP WAN Switch/router is the solution. Any idea guys??
How to create full HA solution for F5 Active-Passive with 2 external ISP? Any one experience this before. Currently the design is using a single WAN swicth to interconnect the 2 ISP routers and both F5. However this design has a single point of failure-WAN swicth down. How can i desing 2 WAN swicth? I heard someone does that by tagging the port in F5 with and untagged at the same time. How it was done?? - Bart_18836
Nimbostratus
Well I still can't see design you are mentioning, but here is how I would proceed.
1: If on that single WAN switch you have multiple vlans and you connect Bigip using trunk then on BigIP you have to use tagging for each vlan number corresponding to the number of vlan that is on the switch (tagging=dot1q tagging)
2. If you have access port on the WAN switch toward Bigip then do not use tag , just untagged interfaces.
Hope this helps.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects