Forum Discussion
Alex_Ma_58639
Nimbostratus
Mar 19, 2009VIP A > Gateway A, VIP B > Gateway B
Dear Brothers,
May I know whether we can setup i-rule that in case a client access our virtual IP A, it returns through the gateway 192.168.61.1. And if a client access our virtual IP B, it returns through the gateway 192.168.61.2?
Thanks,
Alex
3 Replies
- hoolio
Cirrostratus
Hi Alex,
If there is a client to VIP connection and an LTM to server connection, are you trying to ensure the LTM request to the server uses a gateway or are you trying to ensure the VIP response to the client uses a specific gateway? For the LTM to server connection, the LTM routing table is used to route the request. For the VIP to client response, by default Auto Lasthop ensures the response goes back to the client using the same interface and MAC address that the connection came from.
Aaron - Alex_Ma_58639
Nimbostratus
Dear Aaron,
I am trying to ensure the VIP response to the client uses a specific gateway.
Thanks
Alex - hoolio
Cirrostratus
Hi Alex,
Have you tested this and found that return traffic to the client is not sent to the correct router? For the VIP response to the client, LTM can use a last hop pool instead of the default last hop destination:
https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip9_3config/BIG_IP_LTM_9_3_Config_Guide-03-1.html
Last Hop Pool
A setting that directs reply traffic to the last hop router using a last hop pool. This overrides the auto_lasthop setting. In cases where you have more than one router sending connections to the BIG-IP system, connections are automatically sent back through the same router from which they were received when the auto_lasthop global variable is enabled, as it is by default. If you want to exclude one or more routers from auto-lasthop, or if the global auto_lasthop is disabled for any reason (for example, you may not want it for an SSL gateway), you can use a last hop pool instead. (If auto_lasthop is enabled, the last hop pool takes precedence over it.)
Before configuring a last hop pool, you must first create a pool containing the router inside addresses.
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects