For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BigIP_SJ_132967's avatar
BigIP_SJ_132967
Icon for Nimbostratus rankNimbostratus
Sep 04, 2013

Policy Based Routing (PBR) - Using IP prefix on management and productive interface

Hi,   Guess I have a classic standard problem. I want to serve a service (DNS) in my management network, via a dedicated interface/vlan, not via the management interface. Problem is, that the serv...
application delivery
design
devops
iControl
iRules
management
routing
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Sep 04, 2013

I'd hope you could avoid PBR. Static routing on the F5 should work; the management interface should only be used for locally sourced traffic or responding to traffic that came in that way, you should never have a situation where it comes in over a TMM interface and goes out via the management interface. The opposite can occur however.

 

The management interface default route is only used if the management (HMS) and TMM routing tables contain no match. If you have a default route configured in LTM it'll never be used. Ensure you have specific network routes in both tables and it should work fine.