For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ken_51674's avatar
Ken_51674
Icon for Nimbostratus rankNimbostratus
Sep 19, 2013

Multiple "Outside" interfaces and routing lookups

Tech Guru's, I currently have a basic setup for load balancing consisting of an "outside" VIP subnet along with an "inside" POOL subnet. A firewall borders the "Outside" interface which NAT's publ...
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Sep 19, 2013

Doesn't sound like an optimal design but regardless, the Auto Last Hop feature will save you here but not if your firewalls are clustered and use VRRP things get a bit sticky.

 

You can find more information on ALH here: http://support.f5.com/kb/en-us/solutions/public/13000/800/sol13876.html.

 

From a design POV, could you not route the traffic from the additional f/w through the existing one perhaps? No idea of your set-up and even that doesn't sound great I guess. My worry is one day someone will disable ALH and things will go very wrong.