For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nekau_65641's avatar
nekau_65641
Icon for Nimbostratus rankNimbostratus
Apr 07, 2008

Using same LB for servers on multiple subnets

We are soon putting our newly purchased BIG-IP 3400's into production is a redundant configuration.     I have used Cisco LB's before, and the inside interface where the servers are only suppor...
config
design
Josh_41258's avatar
Josh_41258
Icon for Nimbostratus rankNimbostratus
Apr 24, 2009
Correct.. all of my virtual servers are using the "Auto SNAT" SNAT pool. All traffic is tagged with the floating IP address of the pair.

 

 

I would probably continue to use Auto SNAT for the INSIDE2 vlan. However, I would specify at the VS level which VLAN to bind to.. INSIDE or INSIDE2. Do you see this as being a security risk? The VLAN binding should prevent the VLAN's from talking to one another, right?.. although they would be leaving via the same SNAT pool which could pose as a risk?

 

 

Thanks again.