Forum Discussion

kaj_138381's avatar
kaj_138381
Icon for Nimbostratus rankNimbostratus
Apr 13, 2018

Inter VLAN routing

Hi My LTM setup has a Hand Off VLAN between the Router and the LTM.... the addresses between Router and LTM are in the same subnet and can ping each other. I have a VIP on a VLAN that lives only on the F5, the VIP is up, it is configured to respond to ping, and it is being advertised as a /32 host route to the router. The route is there. The traffic flow will be from the source address, next hop is the F5 VLAN that is shared with the router, I would then hope the F5 will pass traffic to the VIP VLAN.... this does not happen. Looking at packet captures I see traffic enter the F5 on the Router / F5 VLAN but I never see any traffic go out the F5 only VLAN that the VIP is on... Am I installing an unsupported design, or am I just missing something? Many thanks!

 

application delivery
LTM

7 Replies

Sort By
  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Apr 14, 2018

    what is your VIP config? have you set up vlan permissions? If yes, then you need allow the VIP listen on VLAN which is attached to the router

     

  • kaj_138381's avatar
    kaj_138381
    Icon for Nimbostratus rankNimbostratus
    Apr 14, 2018

    Hi, the VIP is actually on all VLAN's at the moment as I have been trying to leave it as open as possible to start with.

     

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Apr 14, 2018

    and an image if possible, and that packet capture output. i don't quite see how you expect to exit traffic on the VLAN of the VIP if it enters somewhere else.

     

  • kaj_138381's avatar
    kaj_138381
    Icon for Nimbostratus rankNimbostratus
    Apr 16, 2018

    @SURGEON - my fault, I double checked the VLAN permissions again and I had restricted it only to the VIP VLAN and not the handoff. I allowed the VS on the handoff VLAN as well and it is all working now. Thanks

     

  • Surgeon's avatar
    Surgeon
    Ret. Employee
    Apr 16, 2018

    what is your VIP config? have you set up vlan permissions? If yes, then you need allow the VIP listen on VLAN which is attached to the router