Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Steffen_87645's avatar
Steffen_87645
Icon for Nimbostratus rankNimbostratus
Jun 26, 2015

Problems with 2 route domain setup

Hello, we have a BigIP with internal and external network. We need two different routing tables for external traffic connection to the VIPs and internal traffic from the BigIPs to the nodes. ...
application delivery
LTM
TMOS
TMSH
Steffen_87645's avatar
Steffen_87645
Icon for Nimbostratus rankNimbostratus
Jun 26, 2015

Amolari, thanks!

 

The nodes are in routing domain 0.

 

I can telnet from routing domain 0 to then nodes on port 80. If I use rdsh / rdexec to telnet from %1, I get blocked on oor firewall and find this in the log.

 

tcpdump works on internal (default routing domain) and external (domain %1). I can see traffic.

 

But if I send a request to the VIP, I see not outgoing packets.

 

  • neiter on internal interface (monitored with tcpdump on BigIP and node)
  • nor on external interface (monitored with tcpdump amd no logs on firewall).

So obviously the BigIP is sending nothing out. :-(

 

Any logs to consider?

 

Thanks, Steffen