NimbostratusWe have multiple IP addresses in routing vlans in our environment, so our systems in that invironment are using the 11.3 F5 as a router.
Is there a way to use F5 to block IP traffic between these vlans or even between IP addresses.
Does the Advanced Firewall Manager (AFM) for 11.3 provide any of this functionality? I'm evaluating it in our lab environment and do not see a way to do this.
Cirrostratus
Regardless, an iRule or Packet Filter are options.
The F5 is a deny by default device so do you have a routing VS, SNAT or similar setup that allows this traffic?
Employee
NimbostratusWe do have a routing VS setup to watch traffic. It seems like it would be messy though to setup IP restrictions utilizing a routing VS.
As an example, if we have a server with an ip of 172.24.24.10 and we want to block traffic to a server with an IP address of 172.24.54.10, how would we do this with AFM if neither of those IP addresses have a defined VIP?
Employee