Forum Discussion

jas1066uk_33769's avatar
jas1066uk_33769
Icon for Nimbostratus rankNimbostratus
Oct 16, 2017

Use F5 LTM for both DMZ and Prod load balancing?

Hello all,   We have budget constraints were we have two F5 LTMs (redundancy pair). What is the best way to load balance prod traffic and DMZ traffic ie to keep them separate. Can the F5 loadba...
BIG-IP
LTM
security
  • Martijn_144688's avatar
    Martijn_144688
    Oct 16, 2017

    Jas,

     

    Yes, you can do this with your F5 cluster. And yes, F5 supports VLAN.

     

    Just create two partitions within de configuration for PROD and DMZ. Add all objects (nodes, pools virtual servers, self IP and float IP) in the correct partitions and you have separated the traffic.

     

    You can even create two route domains if the PROD partition needs a different route table.

     

    Look for the BIG-IP TMOS: Routing Administration manual on the F5 website for Route Domains and VLAN's and check " Administrative Partitions" on the F5 website.

     

    DevCentral also provides a lot of information about these subjects.

     

    Good luck. Martijn

     

RaghavendraSY_7's avatar
RaghavendraSY_7
Icon for Cumulonimbus rankCumulonimbus

Yes F5 device supports multiple VLAN's. You can configure separate VLANs and route them through route domains.

 

Please refer below links:

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-ip-routing-administration-11-2-0/2.html

 

Network Configurations on F5:

 

  1. Enable Interface
  2. Configure VLAN and tag interface
  3. Configure Self IP and call VLAN

Please follow above steps to configure network functions on F5. Please let me know any more information is required

 

jas1066uk_33769's avatar
jas1066uk_33769
Icon for Nimbostratus rankNimbostratus
Nov 17, 2017

Thank you Raghavendra