For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jimb2k_159873's avatar
Jimb2k_159873
Icon for Nimbostratus rankNimbostratus
Jun 04, 2014

Routing Between DMZ & LAN using F5

Hello Everybody,   I'm new on the F5 world, and I have a question about a configuration that I'll want to simulate using F5.   This is related to Vmware View architecture, that's the security s...
application delivery
cloud
deployment
design
LTM
vmware
nitass's avatar
nitass
Icon for Employee rankEmployee
Jun 08, 2014

How can I do that please.

 

what we expect to see is (1) incoming icmp echo request from source to bigip, then (2) outgoing from bigip to destination, then (3) incoming icmp echo reply from destination back to bigip and then (4) outgoing from bigip to source.

 

for (1), source ip should be ip you execute ping. destination ip should be ip you ping to.

 

for (2), source ip should be floating self ip (since you use snat automap). destination ip should still be ip you ping to.

 

for (3), source ip should be ip you ping to. destination ip should be floating self ip.

 

for (4), source ip should be ip you ping to. destination ip should be ip you execute ping.

 

you may also use mac address to differentiate between (1) and (2) and between (3) and (4). (1) and (4) are between source and bigip. (2) and (3) are between bigip and destination.