Forum Discussion

gautier2310_360's avatar
gautier2310_360
Icon for Nimbostratus rankNimbostratus
Jul 02, 2018

Route Domain Problem

Hi guys,

 

I am facing route domain problem.

 

Is it possible to have server in the default RD and 2 other RD (1 and 2) accessing this server ? My version is BIG-IP 11.5.3 Build 2.10.196 Engineering Hotfix HF2

 

Ping works from BIG IP RD0 to Server Ping doesn't works form BIG IP RD1 to Server

 

Tcpdump on the backend server show the that ICMP packet goes on him when trying on RD2 (rdexec 2 ping backend server) (with source : self-IP RD0, but server doesn't answer back)

 

Thanks,

 

Gautier

 

application delivery
LTM
  • Andy_McGrath's avatar
    Andy_McGrath
    Icon for Cumulonimbus rankCumulonimbus
    Jul 02, 2018

    First are you using the F5 as a routing in this situation or traffic going via a standard Virtual Server between the servers?

     

    If you are routing then you will need to ensure Strict Isolation is disabled on all the Route Domains otherwise cross domain routing is not allowed.

     

    From the sounds it you are simply facing a routing issue with return traffic not being direct back towards the F5 but without more information about the network setup difficult to answer.

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jul 02, 2018

    Hello,

     

    In F5, a route domain is a configuration object that isolates network traffic. segment network traffic. So if you have the same node in RD0, RD1 and RD2 it works without problems. it's just that the paths they take to reach node are not the same regarding your network configuration.

     

    So in your case you have to validate that you set your configuraiton correctly:

     

    • create RD1 and RD2 (assign the right vlan)
    • Create default route for RD1 and RD2

    default%1 --> Gateway Address xxx.xxx.xxx.xxx%1

     

    default%2 --> Gateway Address xxx.xxx.xxx.xxx%1

     

    Then it will works.

     

    Just a last point when you process your tcpdump you have to do it from RD0 even if you want to trap request of other RD...