seperating traffic of virtual servers

I would like the new app to use interface 1.3 and use vlan 22, what Im not understanding is can I assign a specific vlan to int 1.3 by port (tagged) and not have to assign a specifc vlan to int 1.1 (untagged)? or more properly must all interfaces be either untagged or tagged or can we mix them? the documentation online doesnt show a mixed environment.it can be mixed.

 

 

my second question concerns the use of the mac masquerade address. Is it best practice to use mac masquerade in a redundant system? If so in case of failover if we dont have one set then the destination server wont be able to communicate with the F5 big-ip?if upstream/downstream device is able to update their arp table properly when failover, they would be able to communicate to new active unit. anyway, i think it is better to set mac maq.

 

 

Do we implement a mac masquerade only when using a tagged interface or should we set one up for use with untagged interfaces as well?both i.e. tagged and untagged interfaces.

 

 

hope this helps.