For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rajeev's avatar
Rajeev
Icon for Nimbostratus rankNimbostratus
Aug 11, 2025

Need help for one to one static NAT case.

Hi Team,  Looking for help for one of the setup. We have DMZ switch and F5 is connected to this DMZ switch in one arm mode. We have a trunk link between DMZ and F5 switch. For VIP and servers VLANs ...
application delivery
Injeyan_Kostas's avatar
Injeyan_Kostas
Icon for Nacreous rankNacreous
Aug 11, 2025

Hi,

I don't if it's only me, but I am very confused.

 

You say in switch you have 1 VIP VLAN from which you also use IP for 1 to 1 nat and this is 1 vrf. But then you say F5 has a default route to VLAN, which I am guessing is the same VIP VLAN, but you say it is not in VRF

Then you say servers are on another vlan which again is not in the vrf. Where is it, in another vrf?

Maybe a scheme would be better

 

In F5 you can have different vrfs as route domains and let traffic move from one to the other by disabling strict isolation to both route domains or configure on as parent to the other.