Design question incorporating a firewall

Hi,

I'm stuck with some questions about a design that includes a firewall. I have the following two possible setups, where situation 1 seems more lenient and situation 2 would always require changes to my firewall to permit traffic passing through onto my F5. My goal is to easily expand virtual servers with new external addresses (counting from 40.50.60.3).

Questions regarding situation 1:

• What would my default route be for nodes in the 192.168.1.x network? My guess is 192.168.1.1 as they would use that for their default route and since SNAT auto-map on the F5 would set up a direct (stateful) connection, it would use the floating self IP on the egress VLAN;
• The F5 is a virtual appliance that has it's external VLAN untagged to interface 1.2 and external IP 40.50.60.3/29. How would I go about using 40.50.60.4 on the F5 to be used as a virtual server?; You should see the external connection as a layer 2 VLAN that is maintained by us.
• Would the default route for my F5 be 40.50.60.1? (if even required?)

Questions regarding situation 2:

• What would my default route be for nodes in the 192.168.1.x network? My guess is the floating self IP, 192.168.1.246.

Overall questions:

• Looking at the topologies; am I missing some design matters or other ideas?
• Which setup would you recommend?

Thanks in advance,

Dave