Forum Discussion
phowes
Nimbostratus
NimbostratusRouting application traffic through management interface
Hello all, I have a PoC setup in our lab with a management, internal and DMZ network and have a problem with routing. The F5 always sends the connection to the ADFS backend out from its DMZ interfac...
Hi dude,
The out-of-band mgmt interface has a real benefits, especially for security and when you face issues on BIG-IP data plane controller.
But sometimes, infrastructure limits and force us to adapt on it.
In some cases, I used to set an "mgmt" address on traffic interfaces due to a mgmt network absent. So, I left the mgmt port/vlan unplugged from network cable or vlan,
I put a dummy/or default ip address to it, and then I created a selfip with default services allowed to manage that from traffic interface.
In your case, I think is better to route traffic through firewall and keep all things working as default as you can't change de server addresses or mgmt network range.
It's just a little case opinion.
Kind regards.
cjunior
Nacreous
NacreousHi dude,
The out-of-band mgmt interface has a real benefits, especially for security and when you face issues on BIG-IP data plane controller.
But sometimes, infrastructure limits and force us to adapt on it.
In some cases, I used to set an "mgmt" address on traffic interfaces due to a mgmt network absent. So, I left the mgmt port/vlan unplugged from network cable or vlan,
I put a dummy/or default ip address to it, and then I created a selfip with default services allowed to manage that from traffic interface.
In your case, I think is better to route traffic through firewall and keep all things working as default as you can't change de server addresses or mgmt network range.
It's just a little case opinion.
Kind regards.