For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Christian_Manue's avatar
Christian_Manue
Icon for Nimbostratus rankNimbostratus
Apr 29, 2019

VIP forwarding with only F5 BIG ASM

Hello Community, In my client, we have a virtual edition of a F5 BIG ASM (without LTM) and we need to F5 route the nodes request to other networks. The nodes have a F5 as default gateway but, when th...
application delivery
ASM Advanced WAF
BIG-IP
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 30, 2019

Hi

 

you do not need to have LTM for FW traffic.

 

You confirm the following point:

 

  • Create a wildcard VS 0.0.0.0:* (L4)
  • uncheck "Address Translation" and "Port Translation"
  • In your pool you have to set a node that will be the GW of F5 (1.2.3.4:*)
  • Don't forget to set snat automap

Using TCPDUMP check that client request reach F5 on self IP (or floating IP if you have a cluster):

 

tcpdump -nni 0.0 host client-ip and host self/floatingIP

 

Regards