Load Balancing Question

Hi

 

 

The default gateway needs to point to your firewall. What you should do is enable SNAT on the LTM so that the client source IP is natted to that of the source nat IP on the F5.This wil prevent asymetric routing.It will also stop the firewall from dropping "out of state" packets when the client request and sever reply is not part of the same TCP session.

 

 

Your traffic flow should be as follows

 

 

Trafiic flow from Client to Server

 

client->Internet->router/firewall->switch->LTM Virtual-ServerIP

 

 

From the LTM to the server

 

 

LTM SNAT IP->Web Server.

 

 

The reply from the server will then be

 

 

Server->LTM SNAT IP->LTM Virtual ServerIP->Switch->Firewall and back to the client over the Internet.

 

 

Cheers

 

Danie