For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Krishna_251070's avatar
Krishna_251070
Icon for Nimbostratus rankNimbostratus
Jul 07, 2016

IP routing in LTM

Hi Experts,

 

This is my first post here and I am a newbie to F5 world. I was trying to install a BigIP LTM device.

 

I created a Server VLAN and a ClientVIP VLAN assigned self-ip to interfaces. I changed the default gateway of one of the server to the selfip of LTM server VLAN. After that I lost access to the server.

 

I have a default route in the routing table pointing to an IP address in the ClientVIP VLAN. But still it doesn't work.

 

Can you guys please help me with this situation.

 

Krish

 

application delivery
LTM

3 Replies

  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jul 07, 2016

    Hello, bigip is not Routing or switching any traffic by Defaut. For backend routing you need to create a forwarding ip virtual server listening on any addresses any ports enabled on server vlan. Then make sure bigip default route is enough.

     

  • Krishna_251070's avatar
    Krishna_251070
    Icon for Nimbostratus rankNimbostratus
    Jul 07, 2016

    This makes me more confused.

     

    I have created a IP forwarding virtual server and bound it to VIP interface and now I can reach my server.

     

    If I change the VLAN to Server subnet, my server will become unavailable again. However, the server is the one who points to LTM as gateway.

     

    root@(ltm-01)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm virtual DG ltm virtual DG { destination 0.0.0.0:any ip-forward mask any profiles { fastL4 { } } source 0.0.0.0/0 translate-address disabled translate-port disabled vlans { InboundVIP } vlans-enabled vs-index 5 }

     

    • Vijay_E's avatar
      Vijay_E
      Icon for Cirrus rankCirrus
      Jul 07, 2016
      For bi-directional traffic initiation, you need to enable the VS on all the VLANs. The "vlans-enabled" tells you that the VS is listening for traffic only on the VLAN selected. So, the traffic initiated from any other VLAN will be ignored by the forwarding VS.