For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aj_2538's avatar
Aj_2538
Icon for Nimbostratus rankNimbostratus
Mar 26, 2009

Virtual Server in LC

hello frenz.   i have two links,   ISP1: 202.54.X.73 ISP2: 202.54.Y.73     i configured two vs for each of link(202.54.X.185 and 202.54.Y.185), to load balance my webserver...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Mar 26, 2009
Hi AJ,

Your inbound virtual servers should not SNAT, you only want SNAT automap on your outbound wildcard virtual servers (ie, don't use a global SNAT automap). So both 202.54.X.185 and 202.54.Y.185 should both point to a pool with the webserver's address on the outside of the firewall. However you are saying that is also on the 202.54.X network, which probably won't work, you need a 3rd network between LC and the outside of the firewall so that either link can be SNAT'ed outbound. 

 
     ISP 1               ISP2 
       |                   | 
       |                   | 
      202.54.X          202.54.Y 
    ------------------------------ 
    |           LC               | 
    ------------------------------ 
                 | 
              192.168.X 
                 | 
             ---------- 
             |  FW    | 
             ----------

Denny