Forum Discussion

Mark_van_D's avatar
Mark_van_D
Icon for Cirrostratus rankCirrostratus
Jun 30, 2020

SSL-VPN - Route all traffic via Default Gateway

So another routing question in regards to SSL-VPN.   BIGIP has multiple interfaces. External - 10.0.0.250 - 10.0.0.0/24 Internal - 192.168.10.250 - 192.168.10.0/24 - contains VSs and Nodes (Nod...
BIG-IP Access Policy Manager (APM)
security
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee

Hello, it should use the DG of the APM/LTM. What makes you think it is not? Might be a good idea to run a pcap and see what is happening with the traffic; you can it in on 0.0 or the connectivity profile itself:

 

https://support.f5.com/csp/article/K411

Mark_van_D's avatar
Mark_van_D
Icon for Cirrostratus rankCirrostratus
Jul 02, 2020

Hi Dave,

 

It does use the DG for most traffic, but not for the network that it has a direct connection to. Which is fine but that network also has servers on it that don't have the F5 as DG.

I have looked at using Route Domain as well but that brought it's own issues along.