For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

LEHUBY_Jacques_'s avatar
LEHUBY_Jacques_
Icon for Nimbostratus rankNimbostratus
Jun 01, 2016

Load-balancing traffic to servers into a VLAN and Subnet not linked to the F5

Hello

 

I'd like to know if it is possible to create and send trafic to servers that are not into in VLAN defined in the F5 BIG-IP, to put them into a POOL and defined this pool in a VS with SNAT or AUTOMAP configured.

 

for example : Vlan A : VS defined on that vlan with ip1 vlan A : Floating ip has ip2 (use aslo for snat automap) Vlan A : a router as gateway for that subnet

 

Vlan B : some nodes X and Y into that vlan (IPx and IPy) This vlan is not define into the F5 ; configured somewhere else, routed by a gateway ; routing is OK between F5 and Servers

 

The trafic should be sent to the server with : IP source (ip2 from vlan A) and Dest IP : IPx using the gateway router as node X is outside the vlan Then , Node will answer with Source IP : IPx and Dest IP : ip2 which is the SNAT address

 

Does it works ? or Do servers nodes must be into a VLAN attached to the F5

 

Thanks

 

application delivery
BIG-IP

2 Replies

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Jun 01, 2016

    Server nodes don't have to be in VLAN directly attached to the F5. SNAT may be required depending on the Network setup and GW configured on the servers.

     

  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jun 01, 2016

    Hello Jacques, you can have routed pool members. BIG-IP will use his routing table to reach them. all you need to check is that servers have a route back to the BIG-IP SNAT address, or if you don't SNAT some PBR redirecting traffic to BIG-IP to keep sessions coherent, otherwise that another type of configuration using asymetric proxy on BIG-IP.