Forum Discussion

Humair_167681's avatar
Humair_167681
Icon for Nimbostratus rankNimbostratus
Aug 21, 2015
Solved

using VIP to connect to Active LTM

Hi all,

 

We have two LTMs in a HA pair. When we connect to one of the devices, sometimes we find that it is not the Active device and then we have to log onto the other device.

 

Therefore to solve this problem, I would like to find out if there is a way we can configure a VIP on the LTM so that we also connect to the Active device and not the Standby device?

 

application delivery
devops
ha pair
iRules
LTM
management
vip
  • Lee_Payne_53457's avatar
    Lee_Payne_53457
    Aug 21, 2015

    If your security allows it you could add a DNS entry pointing to the floating IP of one of your traffic interfaces and then configure it to allow access to the management interface that way. We do that for our LAN based F5's and it works really well for our support teams.

     

4 Replies

Sort By
  • Lee_Payne_53457's avatar
    Lee_Payne_53457
    Icon for Cirrostratus rankCirrostratus
    Aug 21, 2015

    If your security allows it you could add a DNS entry pointing to the floating IP of one of your traffic interfaces and then configure it to allow access to the management interface that way. We do that for our LAN based F5's and it works really well for our support teams.

     

  • Humair_167681's avatar
    Humair_167681
    Icon for Nimbostratus rankNimbostratus
    Aug 21, 2015

    Thanks Lee.

     

    How would we allow access to management interface? Is that done by using the port lockdown feature?

     

    Regards,

     

    Humair

     

  • Lee_Payne_53457's avatar
    Lee_Payne_53457
    Icon for Cirrostratus rankCirrostratus
    Aug 21, 2015

    That's correct, use the allow default setting and that should let you access the management interface through the floating IP.