Forum Discussion
Glenn_32974
Nimbostratus
Jan 11, 2012Inter-VLAN Routing on F5
Hello Guys!
I have been given the 172.31.39.0 / 24 network in order to create 4 Subnets to assign to corresponding VLANS
so right now I have :
172.31.39.0 / 26 subnet (VLAN 1)
172.31.39.64 / 26 subnet (VLAN 2)
172.31.39.128 / 27 subnet (VLAN 3)
172.31.39.160 / 27 subnet (VLAN 4)
my problem is that I can not make host on different VLANs (subnets) talk to each other...
I know this should be pretty straight forward but i can´t find the way
thanks in advnced!
- Chris_Miller
Altostratus
I assume your F5 has an IP on those subnets and is the default gateway for those backend systems? - Glenn_32974
Nimbostratus
Correct Chris! I have created float IPs for every VLAN and those float ips are the DG for the back end systems... - nitass
Employee
can you try ip forwarding virtual server? - mikand_61525
Nimbostratus
Setting up the F5 as a router is fairly simple (once you know how to do that 😉ltm virtual /Common/VS_ROUTE { destination /Common/0.0.0.0:any ip-forward mask any profiles { /Common/FASTL4_ROUTE { } } translate-address disabled translate-port disabled vlans-disabled } ltm virtual-address /Common/0.0.0.0 { address any arp disabled mask any traffic-group /Common/traffic-group-1 } ltm profile fastl4 /Common/FASTL4_ROUTE { app-service none defaults-from /Common/fastL4 loose-close enabled loose-initialization enabled reset-on-timeout disabled }
- mikand_61525
Nimbostratus
And here is the UDP tweak (the F5-forum doesnt seem to like two code-blocks after each other with some regular text in between): - mikand_61525
Nimbostratus
Lets see if it works this time?ltm virtual /Common/VS_ROUTE_UDP { destination /Common/0.0.0.0:any ip-forward ip-protocol udp mask any profiles { /Common/FASTL4_ROUTE_UDP { } } translate-address disabled translate-port disabled vlans-disabled } ltm virtual-address /Common/0.0.0.0 { address any arp disabled mask any traffic-group /Common/traffic-group-1 } ltm profile fastl4 /Common/FASTL4_ROUTE_UDP { app-service none defaults-from /Common/fastL4 idle-timeout 5 loose-close enabled loose-initialization enabled reset-on-timeout disabled }
- hoolio
Cirrostratus
Posted By mikand on 01/14/2012 02:31 PM - Beinhard_8950
Nimbostratus
mikand:i guess you don´t have any firewalls between your subnets?
because of loose option...
/Beinhard - mikand_61525
Nimbostratus
The loose open/close is because the entry will go away from the internal statetable in the F5. - mikand_61525
Nimbostratus
Det "document" I had in mind:
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects