Forum Discussion

jas1066uk_33769's avatar
jas1066uk_33769
Icon for Nimbostratus rankNimbostratus
Oct 16, 2017

Use F5 LTM for both DMZ and Prod load balancing?

Hello all,

 

We have budget constraints were we have two F5 LTMs (redundancy pair). What is the best way to load balance prod traffic and DMZ traffic ie to keep them separate. Can the F5 loadbancer support vlans? The F5's will be behind a firewall (inside has prod vlans and DMZ vlans (IntTRAnet traffic)).

 

Thank you for any info

 

Jas

 

  • Jas,

     

    Yes, you can do this with your F5 cluster. And yes, F5 supports VLAN.

     

    Just create two partitions within de configuration for PROD and DMZ. Add all objects (nodes, pools virtual servers, self IP and float IP) in the correct partitions and you have separated the traffic.

     

    You can even create two route domains if the PROD partition needs a different route table.

     

    Look for the BIG-IP TMOS: Routing Administration manual on the F5 website for Route Domains and VLAN's and check " Administrative Partitions" on the F5 website.

     

    DevCentral also provides a lot of information about these subjects.

     

    Good luck. Martijn

     

  • Yes F5 device supports multiple VLAN's. You can configure separate VLANs and route them through route domains.

     

    Please refer below links:

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-ip-routing-administration-11-2-0/2.html

     

    Network Configurations on F5:

     

    1. Enable Interface
    2. Configure VLAN and tag interface
    3. Configure Self IP and call VLAN

    Please follow above steps to configure network functions on F5. Please let me know any more information is required

     

  • Yes F5 device supports multiple VLAN's. You can configure separate VLANs and route them through route domains.

     

    Please refer below links:

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-ip-routing-administration-11-2-0/2.html

     

    Network Configurations on F5:

     

    1. Enable Interface
    2. Configure VLAN and tag interface
    3. Configure Self IP and call VLAN

    Please follow above steps to configure network functions on F5. Please let me know any more information is required

     

  • Jas,

     

    Yes, you can do this with your F5 cluster. And yes, F5 supports VLAN.

     

    Just create two partitions within de configuration for PROD and DMZ. Add all objects (nodes, pools virtual servers, self IP and float IP) in the correct partitions and you have separated the traffic.

     

    You can even create two route domains if the PROD partition needs a different route table.

     

    Look for the BIG-IP TMOS: Routing Administration manual on the F5 website for Route Domains and VLAN's and check " Administrative Partitions" on the F5 website.

     

    DevCentral also provides a lot of information about these subjects.

     

    Good luck. Martijn

     

  • Jas,

     

    Yes, you can do this with your F5 cluster. And yes, F5 supports VLAN.

     

    Just create two partitions within de configuration for PROD and DMZ. Add all objects (nodes, pools virtual servers, self IP and float IP) in the correct partitions and you have separated the traffic.

     

    You can even create two route domains if the PROD partition needs a different route table.

     

    Look for the BIG-IP TMOS: Routing Administration manual on the F5 website for Route Domains and VLAN's and check " Administrative Partitions" on the F5 website.

     

    DevCentral also provides a lot of information about these subjects.

     

    Good luck. Martijn