For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mnb_63148's avatar
mnb_63148
Icon for Nimbostratus rankNimbostratus
Jan 02, 2014

vcmp route domains and vlans

I am setting up a pair of 10200 vcmp appliances. According to the configuration guide, the recommendation is to configure vlans on the vcmp host instead of the vcmp guests.

 

The guests I am deploying involve multiple partitions (i.e. a partition for each customer). I also need to configure a route domain for each partition. If I configure the vlans on the host, the vlans on the guests show up in the Common partition and I cannot move them over to the route domain specific to each customer.

 

Is there a way to achieve layer 2 vlan separation for each partition and route domain if the vlans are configured on the host? In other words, I need to isolate vlan traffic to specific partitions and route domains so that the vlan for one customer is not accessible to another customer.

 

Also, is there a drawback or issue that may arise later if I configure the vlans on the guest instead of the host?

 

Thanks.

 

3 Replies

  • My procedure is to create the VLAN on the vCMP host, assign it to the vCMP guest, then login to the guest, delete the VLAN from Common, and re-create it in the target partition.

     

    This works quite well and so far has caused no issues. We have done this about 100 times so far.

     

  • in vcmp guest we can have numbers of both RD/partition . or can we create multiple partition & multiple route domain in vcmp host as well

     

    i understand you create partition and route domain in vcmp guest (not vcmp host). for vlan, you have to delete and then re-create it in the guest.

     

  • I don't believe using route domains in your vCMP host is a good idea, and I'm not certain it is supported. You should still be able to use admin partitions, though.