For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jafar_39850's avatar
jafar_39850
Icon for Nimbostratus rankNimbostratus
Feb 03, 2010

Routing Issue

Not really urgent, but I was wondering if this can be done.     This is our current setup:     We have a DMZ switch, which the external interface of our Big IP LTM is attached to...
config
design
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Feb 04, 2010
HI Jafar,

 

The one thing you could do as add an iRule to the forwarding virtual server to block any L3 connectivity into the internal IP address.

 

There is also a setting in the virtual server forwarding that you can apply the vs for ONLY specific VLANS, so it basically you can apply it for internal segment but exclude DMZ side.

 

 

I hope this helps

 

 

Bhattman