Forum Discussion

NZ_David_20489's avatar
NZ_David_20489
Icon for Nimbostratus rankNimbostratus
May 09, 2014

Configuring IPSec with HA configuration

I have a pair of F5 LTMs (HA) whihc I need to configure an IPSec tunnel to a 3rd party device. Is it possible to create the tunnel endpoint using the Floating SelfIP to provide a level of redundancy...
application delivery
availability
deployment
design
LTM
vandenhoutenp_9's avatar
vandenhoutenp_9
Icon for Nimbostratus rankNimbostratus
May 14, 2014

Hi there,

 

Yes it is. Presumably your devices are in an active/standby pair?

 

Thanks

 

Peter

 

  • NZ_David_20489's avatar
    NZ_David_20489
    Icon for Nimbostratus rankNimbostratus
    May 14, 2014
    Yes the devices are active/standby. So just to confirm, Are you saying that we can use a floating self IP.
  • vandenhoutenp_9's avatar
    vandenhoutenp_9
    Icon for Nimbostratus rankNimbostratus
    May 16, 2014
    That's correct. With our setup we had the two devices configured with 192.168.0.1 and 192.168.0.2 with 192.168.0.3 being the floating IP address. For the traffic selector you obviously just need to ensure that your source address matches the floating IP address.