For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Josh_41258's avatar
Josh_41258
Icon for Nimbostratus rankNimbostratus
Sep 30, 2013

LTM+ASM On DIfferent BIG-IPs

Is there a deployment guide for v11 that discusses the best practices when deploying LTM and ASM on separate BIG-IP devices?   I see this for v10: http://www.f5.com/pdf/deployment-guides/big-ip-lt...
design
Sec-Enabled_658's avatar
Sec-Enabled_658
Icon for Cirrostratus rankCirrostratus
Sep 30, 2013

The external pool actually has two pool members, as the ASMs are running as standalone asm devices. So either asm can process the traffic at any time. The asm vip LB's to a pool that has one member as the LTM is running as active/standby mode.

 

  • Josh_41258's avatar
    Josh_41258
    Icon for Nimbostratus rankNimbostratus
    Sep 30, 2013
    Ok, gotcha. So, if your ASM's go down, you won't be able to process traffic, correct? That is why I was considering using priority groups on the external LTM to send directly to the LTM if ASM goes boom.