Forum Discussion
hooleylist
Apr 12, 2012Cirrostratus
Hi GM,
Can he do this even though the non-load balanced servers are on the same segment as the load balanced servers all behind the BIG-IP 3600?
Sure. If the destination host's default gateway isn't LTM, you'd want to use SNAT to ensure responses from the host come back through LTM.
You can use a virtual server without load balancing. Here's a SOL with more detail:
SOL7229 - Methods of gaining administrative access to nodes through the BIG-IP system
https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7229.html
Is there any technical reason that he should create two segments, one behind the F5 load balancing device for load balanced servers and another segment not behind the F5 load balancing device for non-load balanced servers?
As stated above, you don't have to have two separate VLANs on LTM. But it can be advantageous from a security and access control perspective to have all access to the servers done through virtual servers on LTM.
Aaron