For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nekau_65641's avatar
nekau_65641
Icon for Nimbostratus rankNimbostratus
Apr 07, 2008

Using same LB for servers on multiple subnets

We are soon putting our newly purchased BIG-IP 3400's into production is a redundant configuration.     I have used Cisco LB's before, and the inside interface where the servers are only suppor...
config
design
Josh_41258's avatar
Josh_41258
Icon for Nimbostratus rankNimbostratus
May 08, 2009
OK, thanks for the answer. I guess the most secure way to do things here, is to stop using Auto SNAT, and to configure separate SNAT pools for each VLAN. I see this as the only way to keep servers from both VLAN's going out the floating IP addresses (via Auto Snat), thus preventing chatter. Does this sound reasonable?