Forum Discussion
Peter_Z
Apr 12, 2011Cirrus
Internal server to VIP from other than Internal subnet
Hello,
I'm curious, if it is possible to have servers behind the internal BIG-IP vlan to access the VS (VIP) that is either from the External BIG-IP subnet (same as the external vlan self-IP) or other subnet that exists on the BIG-IP (other than external or internal subnet).
For example:
server is on the internal subnet 10.10.10.0/24 (big-ip self-ip 10.10.10.51)
VS1 in on the external big-ip subnet 192.168.1.80 (big-ip self-ip 192.168.1.51)
VS2 is from the subnet other than the above (for example: 172.16.16.80)
I was testing (open a webpage) such a configuration in LTM-VE, but i was not able to access the VIP successfully unless I have defined a STATIC nat for the server. I was getting RST packets from the BIG-IP, however the ping to both VIPs was successfull.
Is the behavior different if the server (working as a client) is not directly from internal big-ip subnet but other subnet reachable via the Internal big-ip vlan ?
Thanks
- Minn_62043CirrostratusYou can add a forwarding ip virtual server on BIG-IP. As long as the servers on internal vlan knows how to route the traffic to BIG-IP, it should be able to access the servers elsewhere.
- nitassEmployeeIf listener object e.g. virtual server, snat, nat is enabled on that vlan i.e. internal vlan, server should be able to access it.
- Michael_YatesNimbostratusI agree with nitass.
when CLIENT_ACCEPTED { if { [class match [IP::client_addr] equals mynetwork] } { snat automap } }
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects