one-armed with one vlan

Question

how can we implement one-armed solution with only on vlan between F5 and our gateway router.

m_afifi · Answer

Hi Mostafa,&nbsp;This can be implemented by using one VLAN and a default route in the BIGIP.&nbsp;You will have to configure F5 BIGIP with self IPs in the same vlan and create a default route pointing to your router.&nbsp;In case your back-end servers (pools members)  in a different VLAN the F5 will reach these servers via the router. Otherwise, if your back-end servers are in the same VLAN make sure to use SNAT or make the F5 floating IP as the back-end servers Gateway.&nbsp;I hope this helps.&nbsp;Best Regards.&nbsp;&nbsp;

m_afifi · Answer

Hi Mostafa,&nbsp;Typically, one-armed is when the communications between BIGIP and clients , and the communications between BIGIP and pools members using the same VLAN. &nbsp;And two-armed is when you use defferent VLANs i.e. different self-IPs, one VLAN for the communications between BIGIP and clients , and the other VLAN for the communications between BIGIP and pools members.&nbsp;See below:&nbsp;I hope that helps.  &nbsp;Regards.

mostafa_elsayed · Answer

so kindly explain what is different between one-Armed and two-Armed design

Forum Discussion

one-armed with one vlan

3 Replies

Jonathan - March 2026 Featured Member

F5 AppWorld 2026 Las Vegas - iRules Contest Winners!

2026 F5 DevCentral MVP Announcement

Recent Discussions

F5 Device Management Certificate renewal

Recommendation for Adv. Lab

Cloud Apps Protection

Illigal Parameter addition as custom signature set wanted to Unblock

CPU load when Prometheus is scraping metrics from F5 BIG-IP LTM

Related Content

One-Arm Mode Migration

SSL Orchestrator Advanced Use Case: One-Armed Mode

Migrating between sites using stretched VLANs

One ARM mode with pool members in different VLAN

one arm setup and two vlans

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS