For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jayanthi_41101's avatar
jayanthi_41101
Icon for Nimbostratus rankNimbostratus
Feb 09, 2017

MAC masquerade - For Floating Self IPs vs Non Floating Self IPs

We are currently having F5 LTM on v10.2.4. Trying to understand how does MAC masquerade work?

 

MAC masquerade per VLAN of Floating Self IP will be carried over between Active/passive pair.

 

But how does non floating Self IPs used for health check work? What will be the MAC address that will be used in this case?

 

application delivery
BIG-IP
LTM

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 10, 2017

    Jayanthi, in v10, as you say, the MAC Masquerade address is configured on the VLAN (note in v11 it is configured on the Traffic Group as part of the new HA setup called DSC - see The BIG-IP system now associates masqueraded MAC address with traffic group

    Anyway, yes you're are right on MAC Masquerading - see quote from article K7214 

    Upon failover, the shared MAC address(es) float to the newly-active BIG-IP system along with the shared IP addresses.

    In regards non-floating self IP address, as they don't failover as part of an active/standby setup this precludes the need for MAC Masquerade and each device in a HA pair will communicate to the backend pool members from their own individual IP address/MAC address.

    Hope this helps,

    N