For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cd_312641's avatar
cd_312641
Icon for Nimbostratus rankNimbostratus
Oct 04, 2018

VS with another VS as Pool

Hello,   Just wanted to understand why a particular scenario I am testing is not working.   We have a F5 with a single Route Domain (0) and two VLANs (external and internal, self and float IPs ...
BIG-IP
LTM
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 04, 2018

So to be clear, your external pool member is a VIP address?

I've heard people say that they've gotten this to work in some BIG-IP versions, but technically it isn't intended to work, and it has to do with the internal ARP between the VIPs.

To get from one VIP to another, your best bet is to VIP target, which is a simple iRule command:

when CLIENT_ACCEPTED {
    virtual VS-Internal
}

Also, depending on your BIG-IP version, you can also do this in an LTM CPM policy by configuring the policy to forward traffic to a virtual server.