Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

scarville's avatar
scarville
Icon for Nimbostratus rankNimbostratus
3 years ago

Restricting traffic between Vlans.

We have an F5 servicing our DMZ. It hosts the external IPs and acts a router for the DMZ servers.                                         +--- [ VLAN_2110 ] [ Internet ] ---- [ F/W ] ---- [ F5 ] --...
firewall
security
vlan
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
3 years ago

Hello scarville,

From my perspective, the easiest way to achieve this is to configure two reject VS to deny the traffic between those vlans.

1. Configure one reject VS listening on VLAN_2110 and use the IP range of VLAN_2310 as destination.

2. Configure one reject VS listening on VLAN_2310 and use the IP range of VLAN_2110 as destination.