Forum Discussion
Hi, First the servers must point to BIG-IP as default gateway. Configure static routes or run a dynamic routing protocol of the BIG-IP.
HTH.
- Pzamberlan_2615Jul 06, 2018Nimbostratus
Thanks for the reply.
The servers have as DG the Self-IP of the BIG IP. But additionally I need these servers to have internet connection and do so with a Snat, and the connection to the internet is for a FW not for the BIG-IP.
Regards!
- ebenJul 09, 2018Nimbostratus
If the traffic from internal servers outbound is to the internet, then a default route is what you need. Why don't you want to use that? Do you have a "Forwardinf IP" wildcard (0.0.0.0:0)virtual server type on the internal VLAN to process the internet traffic from the servers? If you have one in place share the output of "tmsh list ltm virtual "
- Pzamberlan_2615Jul 10, 2018Nimbostratus
Hi Eben,
I have a default route, but this route is different from the route that the servers have to use for outbound internet traffic.
So I need 2 routes: -One for outgoing internet traffic. -The route for traffic to customers. (current DR).
Thanks for the reply.
- ebenJul 12, 2018Nimbostratus
I can think of more than one way to get this done but I need you to share what your F5 architecture is like. Basically If one route is to the internet, then the default route will suffice provided the upstream switch, router or firewall permits the Post-Translated (SNAT or Automap) IP address of the traffic.
Secondly, If the route for traffic to customers is not going to the internet, then you can create a more specific Forwading IP virtual server for the destination, but this time use a SNAT pool that contains an IP address in the range of your desired egress interface.
Cheers