For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Sep 04, 2014

Link Controller - Create Link(ISP) object

Hi All,   I have to install LC, Need your suggestions and help on configuration. I don't want to do any changes(no NAT changes) on existing customer firewall.   1) My LC deployment architecture...
application delivery
availability
deployment
design
LTM
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Sep 11, 2014

Hi Sachin,

 

there are actually two options to handle outbound traffic (which is the LTM component in LC anyway):

 

1. Wildcard network virtual server in mode ForwardingIP (requires to have a default route using a default_gateway_pool with the locally attached outbound router interfaces as poolmembers).

 

2. Wildcard network virtual server in mode Standard or PerformanceL4 in combination with the default_gateway_pool.

 

In both cases it´s required to use SNAT automap (works in default configuration for TCP and UDP only) or equivalent on the load balancer or to apply hiding NAT on the ISP routers.

 

To make outbound load balancing work, the ISP router interfaces need to be locally attached to the BIG-IP (connected on L2 with no additional L3 hops) and to have turned off (destination) NAT in the virtual server settings as mentioned before in this thread.

 

Thanks, Stephan