For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Routing Domains, HA and wrong ARP entries

Hi,   I am new to F5 so sorry for any obvious questions. My setup is based on two LTM VE in Active-Passive config using 1.5.1 HF4. Two Routing Domains configured: default (ID0) with internal, exte...
application delivery
design
LTM
network
TMOS
virtualization
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Well,

 

DMZ VLAN is assigned to own Route Domain (ID1), internal VLAN is assigned to default (ID0). Both of mentioned VLANs are using separate ports on LTM, DMZ port 1.4, intrnal port 1.2. Each port is connected to separate port group on vSwitch. So everything is as far as I understand separated. I have no issue to apply same ip (except %1) to self and floating IP. Each self is assigned to separate VLAN so 10.128.50.102 is assigned to internal and 10.128.50.102%1 to DMZ. There are no other errors or issues reported in log except that wrong MAC addresses are listed in ARP - at least for me those are wrong but maybe I am wrong.

 

Piotr

 

  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    Sep 17, 2014
    Additionally new Route Domain (ID1) has Strict Isolation: Enabled and Parent Name: None so no traffic should be routed between RD. Piotr