For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Warren_A__97345's avatar
Warren_A__97345
Icon for Nimbostratus rankNimbostratus
Nov 23, 2009

Self IP for floating IP?

I am finishing up my configuration of a set of 9.2.5 redudant pair LTM units and I have a few quick questions.

 

 

If I have a front side of:

 

 

LB1: 10.10.1.5/24

 

LB2: 10.10.1.6/24

 

 

VIP1: 10.10.1.7:80/24

 

VIP2: 10.10.1.7:443/24

 

VIP3: 10.10.1.8:80/24

 

 

Do I need to make the 10.10.1.7 and 10.10.1.8 a Self IP on the device and check the float option on each unit (and set unitID1 and unitID2) or any IP that you make a VIP not need to be added to the self IP area?

 

 

 

My second question:

 

What is the cleanest way to preserve ourside IP information for my inside network? Would setting up n-path and placing a loopback IP for all the vip IPs be what needs to be done? Or is there a way to set up the LBs to keep source address and allow the boxes on the inside network (assumed web pool) to reply using default gateway? Or should I set the Load balancers themselves up as a gateway device and use an Inside vip and point the servers at the inside VIP as the gateway/router?

 

 

 

Thanks in advance for the help. Feels good to be playing on F5s again :-)

 

dev
devops
iControl

3 Replies

  • Warren_A__97345's avatar
    Warren_A__97345
    Icon for Nimbostratus rankNimbostratus
    Nov 24, 2009
    Really?

     

     

    Nobody?

     

     

    How do you guys impliment your snat pools? Do you not make it a floating IP on each of your HA pairs?

     

     

    Does originating IP not matter for you guys if you run snats? or do you do some irule with rlnclientipaddr header?
  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Nov 24, 2009
    Warren,

     

     

    This is a wrong forum for asking F5 Config-related questions. This forum is for iControl API - related discussions. I suggest that you re-post your question in Adv Design and Config Forum or the "Questions of the week".

     

     

    Do you have the LTM documentation? - Configuration Guide for BIG-IP LTM can be downloaded from F5 support site, here is the URL:

     

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip9_3config.pdf.html/Configuration_Guide_for_BIG-IP_Local_Traffic_Management_version_93.pdf

     

     

     

    Sam

     

  • Warren_A__97345's avatar
    Warren_A__97345
    Icon for Nimbostratus rankNimbostratus
    Nov 24, 2009
    Oohhhhhh you are absolutely right Sam. I dunno what I have been thinking past few days, I figured iControl = website control panel. Geeesh... rushing a whole datacenter in a week period before a holiday I guess can make a man crazy.

     

     

    Thanks I think I have almost come to my own answer... although the product information form F5 was great, it took me a while to find my support log in but man those PDFs are great :-)

     

     

    Thanks