Forum Discussion

Amit585731's avatar
Amit585731
Icon for Nimbostratus rankNimbostratus
Mar 03, 2017

Routing for F5

Hi,

 

I have 3 vlan created on firewall prod, uat, dev, so we can isolate the 3 networks. Each enviroment uses IP address for VIP and server from respective vlan, so the server IP and VIP are on same subnet. We have extened 3 vlan on F5 as well, so communication between SNAT IP and server should be layer 2 and not forwarded to firewall for communication. Just wanted to check if the request coming from internet will be forwarded to same vlan gateway using auto last hop or do this need default gateway? Since we have 3 vlan so adding default gateway not possible. please suggest.

 

Thanks.

 

application delivery
BIG-IP
LTM

1 Reply

Sort By
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Mar 03, 2017

    Based in your scenario, the firewall should have an interface in each network. So, no need for routes in the firewall.

     

    An access from the Internet, should go back via the Firewall because the auto last hop. However most network engineers don't know this functionality, so it may cause confusion during the troubleshooting. Also, when traffic starts from the F5 to the Internet or other part of the network, you will have to have a default gateway or static route using one of the interfaces.

     

    I would suggest the use of route domain for that. That is basically VRF in F5 world. That would allow you to have multiple default gateways, also provide another level of segregation between the environments.