Forum Discussion

pkannur_189341's avatar
pkannur_189341
Icon for Nimbostratus rankNimbostratus
Feb 25, 2015

Regarding design LTM

Hi team,   I have two Big Ip one is active and other is standby. I have web servers connect to perimeter firewall and have internal servers connected to core. Now i have to load balance the both i...
deployment
design
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Feb 25, 2015

I would suggest connecting you BigIP to the VLAN your web servers live in and use a One-arm mode to load balance them behind your firewall. As for your internal servers connecting the BigIP to internal VLAN via the core is more than a valid approach. If you don't want to change your network topology than a One-arm approach will work for that as well.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_implementations_guide_10_1/sol_one_arm.html

 

  • pkannur_189341's avatar
    pkannur_189341
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2015
    Hi Mr. Parker, Thanks for the response.. Web servers is connected to behind perimeter firewall, web server will be accessed from outside and internal servers are connected to core sw which is behind internal firewall ie on core sw, will be accessed by internal users. Below Is this what you meant: i connect f5[p1] to core sw in the same vlan as internal server [One arm mode] i can load balance internal server. For web server i i connect f5[p2] to sw in the same vlan as web servers behind perimeter FW. Correct me if i am wrong