Forum Discussion
Shahrzad_84598
Nimbostratus
NimbostratusUsing one BIG-IP LTM chassis on two separated security network layers
Hi there!
I need to know if I can use one BIG-IP chassis to run load balancing on web servers(Layer1) and Database servers(Layer2) at the same time... I mean from security point of view, is it possible to connect one BIG-IP Interface to Web access-switch and another BIG-IP Interface to Database access-switch or we should buy two BIG-IP chassis? (Of course We have a firewall between Web & DB Servers)
Thanks Shahrzad
You can do this with one Chassis. To separate the traffic, use Route Domains. You can define a Default Route per Route Domain, so traffic will separate the security zones.
To separate security zones adminsitrativly, you can use a Partition per Zone.
Route Domain Concept: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-routing-administration-11-6-0/8.htmlconceptid
Koni_51721Cirrus
You can do this with one Chassis. To separate the traffic, use Route Domains. You can define a Default Route per Route Domain, so traffic will separate the security zones.
To separate security zones adminsitrativly, you can use a Partition per Zone.
Route Domain Concept: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-routing-administration-11-6-0/8.htmlconceptid
Shahrzad_84598Thanks Koni