For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jas1066uk_33769's avatar
jas1066uk_33769
Icon for Nimbostratus rankNimbostratus
9 years ago
Solved

Use F5 LTM for both DMZ and Prod load balancing?

Hello all,   We have budget constraints were we have two F5 LTMs (redundancy pair). What is the best way to load balance prod traffic and DMZ traffic ie to keep them separate. Can the F5 loadba...
BIG-IP
LTM
security
  • Martijn_144688's avatar
    Martijn_144688
    9 years ago

    Jas,

     

    Yes, you can do this with your F5 cluster. And yes, F5 supports VLAN.

     

    Just create two partitions within de configuration for PROD and DMZ. Add all objects (nodes, pools virtual servers, self IP and float IP) in the correct partitions and you have separated the traffic.

     

    You can even create two route domains if the PROD partition needs a different route table.

     

    Look for the BIG-IP TMOS: Routing Administration manual on the F5 website for Route Domains and VLAN's and check " Administrative Partitions" on the F5 website.

     

    DevCentral also provides a lot of information about these subjects.

     

    Good luck. Martijn

     

RaghavendraSY's avatar
RaghavendraSY
Icon for Altostratus rankAltostratus
9 years ago

Yes F5 device supports multiple VLAN's. You can configure separate VLANs and route them through route domains.

 

Please refer below links:

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-ip-routing-administration-11-2-0/2.html

 

Network Configurations on F5:

 

  1. Enable Interface
  2. Configure VLAN and tag interface
  3. Configure Self IP and call VLAN

Please follow above steps to configure network functions on F5. Please let me know any more information is required

 

  • jas1066uk_33769's avatar
    jas1066uk_33769
    Icon for Nimbostratus rankNimbostratus
    9 years ago

    Thank you Raghavendra