For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Doran_Lum_13484's avatar
Doran_Lum_13484
Icon for Nimbostratus rankNimbostratus
Dec 02, 2016

Setting static route for both VIPs and SNAT to Self IP

Hi all, would there be any issue if we were to set the static route for both VIP and SNAT to F5 Self IP ? because currently we are experiencing strange behavior with sha2 certs where we don't see an...
application delivery
BIG-IP
LTM
Ed_Summers's avatar
Ed_Summers
Icon for Nimbostratus rankNimbostratus
Dec 02, 2016

You can use the self-IP as a next-hop. Typically (simply speaking) you'll want to use a floating self IP for the traffic group so routing survives a fail-over between clustered devices (if applicable).

 

However the wording of your question catches my eye. If the issue is constrained by a property of the server certificate (SHA2 signature algorithm or other), then I would not suspect routing as the issue. Does the issue only impact servers using SHA2 certificates? Are other servers in the same subnets working properly?