Source Base Routing

define a pool for your two gateways, say gw-pool, then create a 0.0.0.0/0 virtual server applied to your internal vlans only and apply this rule to the vip:

when CLIENT_ACCEPTED {
  if { [IP::addr [IP::client_addr]/24 equals 10.223.34.0] } {
    pool gw-pool member 10.223.32.1
  } elseif { [IP::addr [IP::client_addr]/24 equals 10.236.36.0] } {
      pool gw-pool member 10.223.36.1
  } else {
      Your other conditions, if necessary
  }
}

You could use the node command instead of the pool, but then you don't get the benefit of your gateway being monitored (assuming you apply one in your pool definition)

You don't really have to do this with a rule, just create 2 gateway pools, one with each gateway address, and then create two wildcard VIPs (0.0.0.0:0), one enabled only on each internal VLAN (you'll have to use Performance L4 to enable All Protocols), and point those VIP's to their respective gateway pool. You'll probably have to have inbound forwarders to each internal network separately as well.

 

 

Then you won't have to evaluate source address for every packet.

 

 

Denny

Good point, why complicate things unless you have too, right?

 

 

You only need the inbound forwarders if you have auto-lasthop disabled.

Hello

 

 

i have question about sending traffic somewhere

 

 

here is my physical topology

 

 

 

Router --- Firewall -- F5 ----Switch-- (servers and client)

 

 

 

 

F5 has 2 vlan

 

 

server vlan 192.168.254.0/24

 

firewall vlan 10.10.0.0/16

 

 

Cisco switch has private vlan feafure and servers can not communicate with other servers even all those servers in the same subnet.

 

cisco switch feature support send traffic to f5 (if the same network servers try communicate each other)

 

 

at this point;

 

i want send all traffic to the Firewall then firewall will block or permit from policy. after the prolicy they can communicate each other if the firewall accept.

 

The problem is servers, clients and vips on same subnet

 

(192.168.254.0/24)

 

 

any idea?

 

 

thanks

 

 

zafer