For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aaron1121_669's avatar
Aaron1121_669
Icon for Nimbostratus rankNimbostratus
Feb 05, 2009

Implemenation Advice

I'm new to the forums here, and I wanted to see if I could get some advice on an implementation. I’ve worked a lot with the Cisco LD’s, CSM’s, and ASA’s, as well as Radware Applications directors, but...
config
design
L4L7_53191's avatar
L4L7_53191
Icon for Nimbostratus rankNimbostratus
Feb 06, 2009
Two other (random) notes here...you mention 520s, which are older appliances, but you also mention implementing new systems...could you clarify what version we're dealing with?

 

 

Also, (on the "gotchas" front) you mention that there's a checkpoint cluster involved. If you're running them active/active and using MAC multicast you'll probably need to turn auto-lasthop off, as the BigIP will track the last *physical* MAC that the traffic sourced from as opposed to the floating MAC that the Checkpoints will try and use if you're running active/active.

 

 

-Matt