For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jnon's avatar
Jnon
Icon for Nimbostratus rankNimbostratus
Jan 18, 2013

VLAN isolation

Currenlty we have several vlans configured behind the f5 for each application, and we are not using snat, I have a need for security reasons, to secure vlans from one another - I have looked into the...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Jan 22, 2013
OK, well that should only be possible if you have some sort of routing wildcard Virtual Server setup on the BIG-IP, do you?

 

 

If you do and it can't be removed I'd recommend using Packet Filters to prevent this traffic flow.

 

 

If you don't, is the traffic being routed by some other device? A L3 switch or router?