For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mark_van_D's avatar
Mark_van_D
Icon for Cirrostratus rankCirrostratus
Jun 30, 2020

SSL-VPN - Route all traffic via Default Gateway

So another routing question in regards to SSL-VPN.   BIGIP has multiple interfaces. External - 10.0.0.250 - 10.0.0.0/24 Internal - 192.168.10.250 - 192.168.10.0/24 - contains VSs and Nodes (Nod...
BIG-IP Access Policy Manager (APM)
security
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee
Jul 02, 2020

Hello, it should use the DG of the APM/LTM. What makes you think it is not? Might be a good idea to run a pcap and see what is happening with the traffic; you can it in on 0.0 or the connectivity profile itself:

 

https://support.f5.com/csp/article/K411

  • Mark_van_D's avatar
    Mark_van_D
    Icon for Cirrostratus rankCirrostratus
    Jul 02, 2020

    Hi Dave,

     

    It does use the DG for most traffic, but not for the network that it has a direct connection to. Which is fine but that network also has servers on it that don't have the F5 as DG.

    I have looked at using Route Domain as well but that brought it's own issues along.