Management of pool members behind LTM

If you're using a VIP to manage each node, you'd probably want to have one virtual server IP address per node. You could configure it on port 0 and then only allow specific hosts/subnets to connect to the admin VIPs. If it's HTTP you could potentially try to map one VIP to specific pool members using host headers or URI mapping, but it's probably simpler to use a one to one mapping of VIP to node for the admin access.

 

 

Also, I'm pretty sure Windows would reply back to a client on the admin subnet via the admin NIC. So you'd need to have the admin clients on a separate subnet if you don't want to do source address translation on the load balancing VIPs.

 

 

Aaron