cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Forwarding VSERVER (nodes and VSERVER in same subnet)

AN
Nimbostratus
Nimbostratus

I have seen in ISE deployment guide they mentioned two different subnet to have Forwarding VSERVER for PSN node. as shown in below snapshoot:

 

0691T000009j9HrQAI.png

 

But if we have ISE PSN node in same subnet as VSERVER how we would achieve forwarding VIP?

I have assign same IP as ISE PSN node on FORWARDING VSERVER and point PSN node to F5 SelfIP it worked, but when I restart PSN it wouldn't comeup since it tries to check if there is an existing IP in the network?

 

1 REPLY 1

James_Thomson
F5 Employee
F5 Employee

Are you trying to forward traffic from the left side to the ISE-PSN servers? For example, the ISE-PAN-1 needs to talk directly to 10.1.99.5? If so, then you would configure a virtual server of type Forwarding (IP) that would have the address 10.1.99.0/24. You would probably want to enable it only on the VLAN98.