Forum Discussion
David_130214
Nimbostratus
NimbostratusIs there a guide to set up a LTM VE in an internal environment only?
Hello Everyone,
I'm looking into the correct way to set up a LTM VE in our QA environment so we can match our production environment more closely. The following is the main details or possible issues of the QA environment.
- LTM is being setup in VCenter.
- LTM is not the default gateway.
- The QA environment only has one subnet.
Has anyone setup a LTM in this scenario? I know f5 gives you an error if the management VLAN is on the same subnet as the internal VLAN. If need be, we do have another network, we could use for the management and external VLANs if need be. I'm trying to keep this as simple as possible.
Thanks for you help,
David Williams
LTM Newbie
- tiziano_rosato
Cirrus
Hi,
management interface is for management only, no user traffic!
But you can configure another interface for user traffic and also for management.
shaggy_121467Cumulonimbus
technically the management interface doesn't need to be connected to anything (i'd still give it an address since BIGIPs use them as device identifiers in some code levels). you can use the internal interface/self-IP address to manage the device by configuring "port lockdown" of the self-IP to "allow default". DO NOT do this if the self-IP is publicly accessible.
David_130214Thanks shaggy. Do you have to have an internal and external VLAN?- shaggy_121467you only need one prod VLAN if you're doing a one-arm configuration using SNAT
- David_130214The setup forces you setup both. Do you set the external to equal the internal or do you have to setup another way? Thanks for you help!
shaggytechnically the management interface doesn't need to be connected to anything (i'd still give it an address since BIGIPs use them as device identifiers in some code levels). you can use the internal interface/self-IP address to manage the device by configuring "port lockdown" of the self-IP to "allow default". DO NOT do this if the self-IP is publicly accessible.
- David_130214Thanks shaggy. Do you have to have an internal and external VLAN?
- shaggyyou only need one prod VLAN if you're doing a one-arm configuration using SNAT
- David_130214The setup forces you setup both. Do you set the external to equal the internal or do you have to setup another way? Thanks for you help!
