Forum Discussion

mvukusic's avatar
mvukusic
Icon for Altocumulus rankAltocumulus
May 14, 2014

IPsec between F5 virtual server and its pool member

Hello,   Is it possible to build IPsec tunnel between F5 LTM virtual server and its pool member? Pool member would be Windows 2008 server. So far I have only found the instructions how to configur...
application delivery
design
LTM
microsoft
security
TMOS
marco_octavian_'s avatar
marco_octavian_
Icon for Nimbostratus rankNimbostratus
Jul 14, 2014

I have a similar config working. I have a pair of LTMs with a standard VS and a pool with three members (Win2008, Win2008, and Win2012).

 

I configured the tunnel using the floater ip addresses and left the self-ip addresses alone to perform the standard health checking. It's just in a lab but working okay. The Windows side can be really finicky. After a few tries of understand how the "beast" works, it's not too bad.

 

Also, I put the exact source destination ip addresses (Endpoints) in the Connection Security rule so as to leave my self-ip addresses out of the IPsec logic.