Forum Discussion

sk_51799_310848's avatar
sk_51799_310848
Icon for Nimbostratus rankNimbostratus
Dec 05, 2018

IP forwarding Virtual Server not working for Internal Servers

Hi,

 

I have configured IP forwarding Virtual Server which is not working. Can someone please help me?? Below are the details of Topology. There are 3 components as shown below.

 

External Network- 192.168.0.0/24

 

Default Gateway of F5 - 192.168.0.1, F5 is able to connect to the Internet.

 

F5's Self IP - 10.1.0.145

 

Internal Network - 10.2.0.0/24

 

Server1 - 10.2.0.11, Server2- 10.2.0.22, Server3 - 10.2.0.33)

 

F5 Self IP - 10.2.0.145

 

All have Gateway as F5 self IP - 10.2.0.145. I have configured IP Forwarding Virtual Server, I expected that all internal Servers will be able to reach Internet using this but is not working as expected.

 

Client IP - 192.168.0.200 (Client is able to access the Internet and other Virtual Servers.)

 

application delivery
LTM
security
  • KevinA_246454's avatar
    KevinA_246454
    Icon for Cirrostratus rankCirrostratus
    Dec 05, 2018

    What is your configuration of the virtual server look like ? is your forward virtual server a any any type, meaning any destination and any port or is it port/ip specific?, where is the virtual server listening on(vlan) on the internal where the server's reside ?

     

    Please can you provide the "list ltm virtual" from tmsh for the forward virtual server ip

     

  • DaveS's avatar
    DaveS
    Icon for Nimbostratus rankNimbostratus
    Dec 05, 2018

    Assuming you've configured the IP Forwarding VS properly, you need the correct routing in place. While you have next hop gateways on the way out, there's nothing for the internal network traffic coming in.

     

    You want the F5 external self IP to be in the external network 192.168.0.0/24 and then whatever device you have on the gateway address 192.168.0.1, have a static route for the 10.2.0.0/24 internal network with the next hop being the F5 external self IP.

     

  • DaveS_377638's avatar
    DaveS_377638
    Icon for Cirrus rankCirrus
    Dec 05, 2018

    Assuming you've configured the IP Forwarding VS properly, you need the correct routing in place. While you have next hop gateways on the way out, there's nothing for the internal network traffic coming in.

     

    You want the F5 external self IP to be in the external network 192.168.0.0/24 and then whatever device you have on the gateway address 192.168.0.1, have a static route for the 10.2.0.0/24 internal network with the next hop being the F5 external self IP.