Publicly accessible internal VLAN

Thank you very much to both of you!

 

 

I enabled loose initiate on the FastL4 profile and it works very well. Thank you, Chris, for the step-by-step instructions.

 

 

I'm not too worried about efficiency or security at this point since the setup is not for production yet. But when that time comes, we'll probably setup a symmetric route that only goes through Big IP.

 

Adding a route through Big IP would be the best. I looked into one-to-one VS's too but would probably not take that option. One to one VS's would not be scalable because it has to be configured for each internal server and it uses two IP addresses per server. I guess it's useful if you have few servers you want to reach.