Forum Discussion
SSHSSH_97332
Nimbostratus
NimbostratusMirroring F5 LTM Traffic
we have IDS & needs to mirror all traffic to it can F5 send traffic to it , is the below still valid at Version 11 :
http://support.f5.com/kb/en-us/archived_products/big-ip/manuals/product/bigip4_5admin/BIGip_ids.html
Yes I believe it is, you should look at pool clones. In v11 you can essentially create another pool containing your IDS devices and then associate this pool as a cloned pool on your VS either client side or server side. Take a look here - I think this is what you are asking for, it describes pool cloning a bit more. http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13392.html
RoutingLoop_179Cirrus
Yes I believe it is, you should look at pool clones. In v11 you can essentially create another pool containing your IDS devices and then associate this pool as a cloned pool on your VS either client side or server side. Take a look here - I think this is what you are asking for, it describes pool cloning a bit more. http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13392.html
iaineNacreous
Rather than going down the cloning pool route when I set this up a while back, I set up Interface Mirroring instead and then let the IDS filter out what it needed. My reasoning being that a network SPAN would probably less CPU intensive than the inspection needed to clone a specific service
- iaine
Rather than going down the cloning pool route when I set this up a while back, I set up Interface Mirroring instead and then let the IDS filter out what it needed. My reasoning being that a network SPAN would probably less CPU intensive than the inspection needed to clone a specific service