For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Diogo_Buhler_21's avatar
Diogo_Buhler_21
Icon for Nimbostratus rankNimbostratus
Mar 11, 2016

Traffic for Guest Network (Vlan 50) not working, for the normal one, works, two vs with similar config

Hello dear DevCentral Community,

i'm struggling with an issue that's happening around here.

I have traffic for internal network working properly ( 192.168.1.0/24 ) with 2 virtuals servers created: vs_http and vs_wildcard_out.

ltm virtual vs_http {
    destination 0.0.0.0:http
    ip-protocol tcp
    mask any
    profiles {
        http { }
        mptcp-mobile-optimized { }
    }
    rules {
        HTTP_Redirect
    }
    source 192.168.1.0/24
    source-address-translation {
        type automap
    }
    translate-address disabled
    translate-port disabled
    vs-index 13
}
ltm virtual wildcard_out {
destination 0.0.0.0:any
ip-forward
mask any
profiles {
    fastL4 { }
}
security-log-profiles {
    "Log all requests"
}
source 192.168.1.0/24
source-address-translation {
    type automap
}
translate-address disabled
translate-port disabled
vs-index 7
}  

then, I created a tagged vlan 50 (192.168.50.0/24), and created 2 similar virtual servers: vs_http_guests and vs_wildcard_out_guests

ltm virtual vs_http_guests {
    destination 0.0.0.0:http
    ip-protocol tcp
    mask any
    profiles {
        http { }
        mptcp-mobile-optimized { }
    }
    source 192.168.50.0/24
    source-address-translation {
        type automap
    }
    vs-index 28
}
ltm virtual wildcard_out_guests {
    destination 0.0.0.0:any
    ip-forward
    mask any
    profiles {
        fastL4 { }
    }
    source 192.168.50.0/24
    source-address-translation {
        type automap
    }
    translate-address disabled
    translate-port disabled
    vs-index 27
}

As you can see the virtual servers are the same, but yet, network 192.168.50.0 can't connect to the internet. As a troubleshoot, I went to the two virtual servers working, and changed source to 192.168.0.0/16 and everything works...

Can anyone help me sort this out? Looking forward.

Thanks in advance.

No RepliesBe the first to reply