For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

js_168189's avatar
js_168189
Icon for Nimbostratus rankNimbostratus
Sep 25, 2015

vip in different route domains that node

Our F5 LTM is set up in two different route domains %1 is internal and %30 is DMZ. Each route domain goes to its own security interface on our firewall. The firewall blocks or allows traffic between...
application delivery
cisco
deployment
design
LTM
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Sep 25, 2015

This is not possible the way you describe. Your nodes need to be in the same route domain as the VIP with strict isolation turned on. However, if you are using RD%1 just to route to your servers/nodes in that network it is perfectly valid to create your nodes in RD%30 as it will route out to the firewall and back to your RD%1 provided you don't add a self IP in RD%30 for your subnet that lives in RD%1. We do this now for some services. Hope this helps.