gateway
5 TopicsMultiple Default Gateways
Hi, I have a question regarding default gateway configuration. Please refer to the following setup: We currently have an L4 HA device setup (R2600) in Active-Standby mode, and both units are in the same subnet. The default gateway is set to 192.168.1.1, which is a VRRP address on the L3 side. Since F5 devices synchronize route configurations across devices during config sync, any change to the routing table is applied to both units. Given this, is it possible to configure different default gateways per device in an F5 HA pair? Specifically, I would like to set each unit's default gateway to the real IP of a different L3 device: Default GW for L4 #1: 192.168.1.2 Default GW for L4 #2: 192.168.1.3 I'd like to hear the opinion of experts on whether this is possible and if there is a supported way to achieve this. Thank you.Solved83Views0likes3CommentsQuestions about F5 BIG-IP Multi-Datacenter Configuration
We have an infrastructure with two datacenters (DC1 and DC2), each equipped with an F5 BIG-IP using the LTM module for DNS traffic load balancing to resolvers, and the Routing module to inject BGP routes to the Internet Gateways (IGW) for redundancy. Here’s our current setup (based on the attached diagram): Each DC has a BIG-IP connected to resolvers via virtual interfaces (VPI1 and VPI2). Routing tables indicate VPI1->DC1 and VPI2->DC2. Each DC has its own IGW for Internet connectivity. Question 1: Handling BIG-IP Failures If the BIG-IP in one datacenter (e.g., DC1) fails, will the DNS traffic destined for its resolvers be automatically redirected to DC2 via BGP? How can BGP be configured to ensure this? Is it feasible and recommended to create a HA Group including the BIG-IPs from both datacenters for automatic failover? What are the limitations or best practices for such a setup across remote sites? Question 2: IGW Redundancy Currently, each datacenter has its own IGW. We’d like to implement redundancy between the IGWs of the two DCs. Can a protocol like HSRP or VRRP be used to share a virtual IP address between the IGWs of the two datacenters? If so, how can the geographical distance be managed? If not, what are the alternatives to ensure effective IGW redundancy in a multi-datacenter environment? Question 3: BGP Optimization and Latency We use BGP to redirect traffic to the available datacenter in case of resolver failures. How can BGP be configured to minimize latency during this redirection? Are there specific techniques or configurations recommended by F5 to optimize this? Question 4: Alternatives to the DNS Module for Redundancy We are considering a solution like the DNS module (GSLB) to intelligently manage DNS traffic redirection between datacenters in case of failures. However, this could increase costs. Are there alternatives to the DNS module that would achieve this goal (intelligent redirection and inter-datacenter redundancy) while leveraging the existing LTM and Routing modules? For example, advanced BGP configurations or other built-in features of these modules? Thank you in advance for your advice and feedback!64Views0likes1CommentHow can developers manage nodes having F5 as gateway?
Hello Team, I have a Big IP F5 with AWAF module (version 17.1.1.1) whose floating IP address is configured as the gateway IP for all the nodes. I have created a standard virtual server to host HTTPs services with SSL bridging and AWAF policies. However, our web developers need to administer the content of the web servers via SSH and RDP. Can you advise what is the best way to provide management access to the several nodes? When attempting to SSH or RDP, the nodes are forwarding the response to the BIG IP which in turn is not forwarding the response to the edge firewall. Can you advise if a forwarding L2 or L3 virtual server can be useful in this scenario and how it can be used?Solved76Views0likes4Commentsself ip issue
Hi all, I have a problem, I created a self ip (10.10.10.250/24) on my F5 device to act as a gateway, When I ping this gateway, it says the address is unreachable,Devices pointing to this gateway are working, only the address of this gateway is not pingable. Is there any difference between setting a gateway on the F5 for a segment and setting a gateway on a switch?39Views0likes2CommentsCluster Cross subnet
Hi, We currently have two independent clusters of F5 in separate subnets (sites) and require a method for synchronizing the configuration between them. There is a restriction on the deployment where they must be in separate subnets. The two sites run active-active. The obvious issue for this is that the gateways are separate and when we attempt to synchronize the configuration, the gateway address is clobbered, resulting in the routing breaking. We've tried a few things including: sync only; doesn't synchronize everything ip gw pool w/ sync fail-over; server split routing looking at the files manually and syncing them with external script Does anybody have advice on how they would handle this situation? Thanks.291Views0likes1Comment