Forum Discussion

Nagesh_Nanju_12's avatar
Nagesh_Nanju_12
Icon for Nimbostratus rankNimbostratus
Sep 28, 2013

Access Policy on BIGIP 2000S LTM

Hi We have recently purchased 2 BIGIP 2000S LTM boxes, we are intend to load balance our web servers (2 of them) with this.   We have updated the software to 11.2.1 and configured both the LTMs i...
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 30, 2013

Here are a few considerations:

 

  1. Are the web servers dual-homed (one leg connected to a switch connected to the LTM, and the other leg in the internal LAN? If so, does the LTM have a route to this internal LAN? Without a route it'll be difficult to get traffic to/from these servers.

     

  2. In order for the web servers to get outbound access, you can set up a forwarding VIP (0.0.0.0/0 type forwarding IP) on the LTM's internal interface, and establish a default outbound route.

     

http://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html?sr=32193157

 

  1. If the LTM can route to the internal LAN, and you want external access to services in this LAN, you could either set up virtual server instances or simply create NATs on the LTM.