Forum Discussion

Alessio_Antolin's avatar
Alessio_Antolin
Icon for Nimbostratus rankNimbostratus
Oct 18, 2018

How to return traffic from a vCMP towards two firewalls

Hi all, I have a Viprion with a public vCMP configured, it's connected through point-to-point to firewall.

 

 

Now I should connect the same vCMP to another public firewall.

 

 

Default gateway is firewall-1. What is the best way to return the traffic towards firewall-1 or firewall-2?

 

(PBR? Auto Last Hop? I don't have available core, I can't create new vCMP).

 

Thanks for support!

 

BIG-IP
devops
LTM
  • KevinA_246454's avatar
    KevinA_246454
    Oct 19, 2018

    HI

     

    Maybe a route domain will work for you, each firewall will be in each route domain with its own default route.

     

  • KevinA_246454's avatar
    KevinA_246454
    Icon for Cirrostratus rankCirrostratus
    Oct 19, 2018

    HI

     

    Maybe a route domain will work for you, each firewall will be in each route domain with its own default route.

     

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Oct 19, 2018

    Assuming that the firewalls are on the client side of the F5, Autolasthop will deal with this by default. If it's on the server side then you have to make sure the same traffic goes to each firewall - use routing to separate it across the firewalls.