Forum Discussion
flitz_29934
Apr 19, 2011Nimbostratus
LTM : virtual server in different subnet than a vlan --> possible
Hi everybody,
I'm not able to test it in short term so I'm wondering if the following design can work ?
I would like to know if the Virutal Server (VS) can be set in a subnet not known by the F5, I mean in a subnet not associated to a vlan. To be more clear, see the example below.
- create a vlan "link" + self-IP : 10.1.1.1/30 associated to the vlan "link". This "link" is used to connect the LTM to a router in the network. So a route to the LTM is possible through this vlan.
- create a VS : 192.168.1.1/32. As you can see this VS is not in the vlan previously defined. So it is a single IP only known internal to the LTM.
Could the design work ? Is it possible or must the VS in a defined vlan ?
If I configure a static route on the router saying that 192.168.1.1 can be reached by 10.1.1.1, could it work ? Does the LTM automatically consider the VS ?
Thank you in advance
best regards
- Jonathan_ScholiCirrostratusYes, as long as the LTM can reach the remote server through the default route, it shouldn't be a problem, you just need to use a SNAT pool so that the server knows to send responses to the LTM.
- David_24361NimbostratusHi Jonathan, I am in the same situation as flitz, really need some help. I tried to access the link you posted, but the link does not work. Do you have another link?
- Jonathan_ScholiCirrostratusSorry about the link, try this: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_configuration_guide_10_1/ltm_snat.html1200756
- Jonathan_ScholiCirrostratusCould you describe what you mean by the packets are looping? What are you seeing?
- David_24361NimbostratusHi jonathan, thanks for your reply :)
- Jonathan_ScholiCirrostratusAre your pool members getting traffic when you access 10.4.0.10:8080?
- David_24361Nimbostratusyes jonathan, but just small amount of traffic. i suspect maybe it had been blocked by the loop :(
- Jonathan_ScholiCirrostratusI'm wondering if there is a way you could make this a more standard setup by putting the virtual server on a VLAN managed by the BigIP? It sounds like you have control of the router, so maybe you could try something like a NAT from 10.4.0.10 to an address on the VLAN managed by the BigIP.
- L4L7_53191NimbostratusThis is a long thread and I've not read it all. But if I understood the original use case correctly, you can do this.
- David_24361Nimbostratusyes jonathan, i also have 10.3.11.75:8080 as virtual server also. if i don't enable 10.4.0.10:8080, the 10.3.11.75:8080 can work properly. but if i enable 10.4.0.10:8080 and flow the traffic from the router, it can work for few seconds than hangs. 10.3.11.75:8080 can work again if i restore the config. Or I don't have to restore the config, but stop the flow.
Recent Discussions
Related Content
Â
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects