Forum Discussion

mvukusic's avatar
mvukusic
Icon for Altocumulus rankAltocumulus
May 14, 2014

IPsec between F5 virtual server and its pool member

Hello,   Is it possible to build IPsec tunnel between F5 LTM virtual server and its pool member? Pool member would be Windows 2008 server. So far I have only found the instructions how to configur...
application delivery
design
LTM
microsoft
security
TMOS
mvukusic's avatar
mvukusic
Icon for Altocumulus rankAltocumulus
Jul 01, 2014

I didn't use separate subnet. Tunnel is betweel LTM's self IP (which may or may be not same as VS IP address) and pool member which has only one IP address and is final endpoint.

 

I think my version was 11.4.0.

 

Try to tweak windows firewall features and windows ipsec policy. Check that the tunnel IPs and other settings are mirrored on both sides. Also play around with enable/disable Windows policy and firewall. I had trouble with windows side mostly, LTM part is relatively simple and easy to configure.