Forum Discussion

Alex_Ma_58639's avatar
Alex_Ma_58639
Icon for Nimbostratus rankNimbostratus
Mar 20, 2009

VIP A > Gateway A, VIP B > Gateway B

Dear Brothers,

 

 

May I know whether we can setup i-rule that in case a client access our virtual IP A, it returns through the gateway 192.168.61.1. And if a client access our virtual IP B, it returns through the gateway 192.168.61.2?

 

 

Thanks,

 

 

Alex

3 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Hi Alex,

     

     

    If there is a client to VIP connection and an LTM to server connection, are you trying to ensure the LTM request to the server uses a gateway or are you trying to ensure the VIP response to the client uses a specific gateway? For the LTM to server connection, the LTM routing table is used to route the request. For the VIP to client response, by default Auto Lasthop ensures the response goes back to the client using the same interface and MAC address that the connection came from.

     

     

    Aaron
  • Dear Aaron,

     

     

    I am trying to ensure the VIP response to the client uses a specific gateway.

     

     

    Thanks

     

     

    Alex
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Hi Alex,

     

     

    Have you tested this and found that return traffic to the client is not sent to the correct router? For the VIP response to the client, LTM can use a last hop pool instead of the default last hop destination:

     

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip9_3config/BIG_IP_LTM_9_3_Config_Guide-03-1.html

     

     

    Last Hop Pool

     

     

    A setting that directs reply traffic to the last hop router using a last hop pool. This overrides the auto_lasthop setting. In cases where you have more than one router sending connections to the BIG-IP system, connections are automatically sent back through the same router from which they were received when the auto_lasthop global variable is enabled, as it is by default. If you want to exclude one or more routers from auto-lasthop, or if the global auto_lasthop is disabled for any reason (for example, you may not want it for an SSL gateway), you can use a last hop pool instead. (If auto_lasthop is enabled, the last hop pool takes precedence over it.)

     

    Before configuring a last hop pool, you must first create a pool containing the router inside addresses.

     

     

     

     

    Aaron