For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Apr 01, 2010

Mgmt Auth Traffic on external VLAN

I have connected my managment interface on a 6900 v10.1 box to a management network, and I have configured Active Directory authentication for management access. I was doing some testing and I disconn...
management
monitoring
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Apr 05, 2010
Option 1) Leave your configuration as is, with mgmt auth traffic riding your production data path. This isn't necessarily bad, but might conflict with security policies if in DMZ environment. I've seen many environments with this exact configuration as it is simpler and more cost effective than standing up additional infrastructure for management traffic.

 

 

Option 2) Define a nat on your gateway that you can point to as your mgmt auth target, which will then translate the destination to your real AD address, and translate the source of your mgmt IP to the gateway/nat so the traffic is returned correctly