Create F5 partitions for different environments

Forums Technical Forums
, , ,
1

I have a F5 that is being used by dev/qa department,everything is in the Common partition

Anyway there is a new project and bunch of new VIPs/vlan/Gateways,APIs

I know last time there was conflicts from last project

I cant seem to find the info but i remember awhile back someone was saying,

I could create another partition on the F5 as a blank slate for different depts but it wont affect the common partition.

With all new subnets and vlans , VIPs,etc

Anyone have a starting point or a good article for this,does it work that way?

2

Hi Dash,

I think these articles can help you.

With new subnets and vlan’s I think you also need a new route domain (VRF in normal network terminology)

Also a word of advice, create the route domain and vlans in common, assign the route domain to your new partition and assign the vlans to the route domain (this will help if you ever decide to add an extra partition to the same route domain). Self-ip’s and routes can be created in partition.

Cheers,

Kees

3

It’s good to know there are administrative partitions and route domains. Most of the time these are used together to configure a flexible multi-tenant design.

Route Domains are like VRFs on Cisco and can be used to create an isolated network environment. So you can add VLANs, subnets and Self-IPs to a specific route domain.

Partitions are used to create administrative seperation between objects. This is useful to grant user access only to partitions for which they are authorized.

Here are some useful resources: