For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vallesm77_95699's avatar
vallesm77_95699
Icon for Nimbostratus rankNimbostratus
Dec 19, 2011

Management Port - Bests Practices

Hi,

 

 

I want a to install F5 ltm VM on ESX Vmware.

 

 

See below the network configuration :

 

 

External Self IP : 192.168.18.28/24

 

Internal Self IP : 172.23.2.12/24

 

The LAN for my servers is : 172.20.50.0/16

 

 

How I do configure my "Management IP" ? On the same VLAN of my other servers (172.20.50.x) ? Or on the separate network ? What are the bests practices ?

 

 

Thanks

 

 

 

config
design

2 Replies

  • Michael_J__Whee's avatar
    Michael_J__Whee
    Icon for Nimbostratus rankNimbostratus
    Dec 20, 2011
    Generally, I'd expect to see a separate "management" network that is on a separate VLAN and ACL'd off so that only the people who need access to it can get there.

     

     

    That seems to be the best practice for datacenters in general, at least.
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Dec 20, 2011
    How I do configure my "Management IP" ? On the same VLAN of my other servers (172.20.50.x) ? Or on the separate network ? What are the bests practices ?i assume 172.20.0.0/16 is mgmt subnet. so, if you want to configure mgmt ip, it is under system > platform. anyway, it is not mandatory. bigip can reach your mgmt subnet by adding mgmt route.

     

     

    sol3669: Overview of management interface routing

     

    http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3669.html

     

     

    let me know if i misunderstood what you are asking. :-)