For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ltmbanter_43291's avatar
ltmbanter_43291
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

Route Domains

I have an LTM HA Pair v10.1.0 in a one-armed configuration. My goal is to be able to load balance nodes from a new subnet/VLAN 10.104.2.0/24 VLAN 2, and have the VIP reside on the existing subnet/vla...
application delivery
deployment
LTM
ltmbanter_43291's avatar
ltmbanter_43291
Icon for Nimbostratus rankNimbostratus
Jun 09, 2014

Thanks Kunjan.

 

When you say specify the route domain you mean: 10.104.2.1%1 as the gateway?

 

I didn't think it through with the 10.104.1.X%1 VIP. The application engineers want to load balance nodes from both the 10.104.1.0 subnet and the 10.104.2.0 subnet, and they have a DNS entry tied to the 10.104.1.X VIP. So if I did a %1, then the nodes from %0 wouldn't be reached. I suppose that's why you recommended disabling Strict Isolation. Also, if I disable strict isolation, that will allow the 10.104.1.0/24 nodes to be able to communicate with the 10.104.2.0/24 nodes.

 

So, what I am trying to accomplish doesn't quite make sense. If I need strict isolation, then all nodes/VIPs will have to be in the same subnet.

 

And if I get the nodes all over to the 10.104.2.0 subnet, then I can enable strict isolation and %1 route domain where necessary.

 

Thanks so much.