For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sito79's avatar
Sito79
Icon for Nimbostratus rankNimbostratus
Jan 15, 2009

VNP Configuration Behind Link Controller

Hi,   Just wondering , has anyone done a VPN termination which terminates on a firewall behind an F5 link Controller. I think that my configuration is Ok but the IKE tunnel is always in MM_WAIT_...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Jan 15, 2009
Your configuration should work as long as the VPN supports NAT traversal. I personally have never seen one that handles this properly, but I'm told they exist. I've always had to allow IP forwarding directly to the VPN address so that it isn't NAT'ed, but then your VPN connection is pinned on one link and won't fail over to the other one.

 

 

Denny