For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Jul 28, 2009

v.10 Node Management

Hello I have a LTM with several internal node VLANS.

 

One of the is network 192.168.94.0/24

 

The external interface has 192.168.91.0/24

 

The LTM's default route is 192.168.91.254 (HSRP). When I try to route traffic from the own BIG-IP the traffic is routed without problems.

 

But, when I try to access the physical address of one node (192.168.94.14) or I try to send traffic messages from the node, I see that traffic gets to the LTM, but it isn't routed outside it.

 

I've tried with the LTM's real address and with a floating one as default router for the node.

 

What do I have to do to make the F5 behave as a router. Do I have to create a 0.0.0.0 vserver on every VLAN?

 

I'm using version 10.0.0.1

 

Thank you

 

 

________

 

config
design

2 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Jul 28, 2009
    The LTM is a default-deny device, so you'll need to create a virtual for any traffic you wish to traverse the box. In v4, there was a global enable IP routing checkbox. In v9 forward, you can achieve this with a 0.0.0.0/0.0.0.0 virtual server enabled on all vlans. Note that the routes still need to be in place in the routing table, the virtual server just allows the traffic to flow IF a route is present.