For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

delange's avatar
delange
Icon for Nimbostratus rankNimbostratus
Apr 09, 2021

Self IP for SNAT VLAN, OK. How about for VIP and HA?

I've got an Active/Passive cluster and have configured static self IPs on both devices along with a floating IP in the internal SNAT VLAN. I'm not using the F5 to act as a Gateway for the nodes and i...
Chause1's avatar
Chause1
Icon for Cirrus rankCirrus
Apr 09, 2021

Hi

 

Not sure if I understand the configuration correct but lets give it a go.

 

Your self's are needed as they are used to monitor the application. (Lets say via a icmp/tcp/http monitor)

 

Your float is important on the HA side of things as well as the flow of the traffic. This IP will move between the devices in the HA pair when failover occurs.

 

Normally your traffic is expected to flow back via the F5 for the response.

In most cases SNAT/Auto map will be used, which is configured on the VIP. (If it is auto map it will prefer to use your floating IP for that vlan)

This will avoid that the traffic is sent to the GW and rather returns via the F5

 

Hope this helps