For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Jan 28, 2019

VLAN communication in F5

Hi Friends,   Is it necessary to keep VIP and pool member in same VLAN or we can put them in different VLAN.   Thanks,  
application delivery
LTM
wlopez's avatar
wlopez
Icon for Cirrocumulus rankCirrocumulus
Jan 31, 2019

Best practice for most use cases is for the virtual server IP address to be on the external vlan (the one facing the rest of the network) and the pool members on the internal vlan (behind the F5), using the F5's floating IP address on the internal vlan as the poll members' default gateway.

 

You can also do one-arm where everything is on the same vlan, but you would need to get into using SNATs on the virtual servers.