Forum Discussion

genseek_32178's avatar
genseek_32178
Icon for Nimbostratus rankNimbostratus
Nov 20, 2012

VIP and Pool Differnt Subnets

Hi Experts,

 

Is it possible to configure a Virtual Server with VIP and Pool members both in different subnets? Example,

 

virtual BZTK_VIP

 

destination 203.36.134.220:http

 

ip protocol tcp

 

profile tcp_sidinfo

 

pool bztk_pool

 

vlan vlan_203.36.134.192_26 enable

 

 

pool bztk_pool - 10.0.210.110, 10.0.210.111

 

 

How will the routing happen between the 2 subnets? Will it be taken care by BIGIP?

 

Lets say, a client - 10.10.10.11 sends traffic to VIP-203.36.134.220, how does the routing happen?

 

 

4 Replies

  • Yes, Virtual Servers and Pool Members can reside in different subnets, that's normally how things are setup. As long as the BIG-IP has Self IPs in the VLAN the Pool Members are in, or static routes to the relevant server network (and the same for servers back via the F5) then it will all work just fine. This is standard Linux style stateless routing.

     

    Also note that destination address and (if necessary) port translation occurs automatically.

     

  • thank you for the response.

     

     

    Can you guide me to a any Basic Administration Guide on F5/BIGIP? Its been very difficult to find one.

     

     

    thanks - genseek
  • Well over 20 manuals and guides for BIG-IP, TMOS and LTM can be found here: http://support.f5.com/kb/en-us/prod...1_2_0.html - you'll probably want to read the quick start and implementations manuals to start with

     

     

    Free, self-paced web-based training related to basic technologies and concepts, changes in new software versions and basic LTM configuration are available via the F5 University available here: https://university.f5.com/. An account is required to access the university site.

     

     

    F5 have a corporate Facebook page and two groups that you can subscribe to;

     

    • Corporate Page: https://www.facebook.com/f5networksinc

     

    • F5 Networks Group: https://www.facebook.com/groups/15526162977/

     

    • F5 DevCentral Group: https://www.facebook.com/groups/f5devcentral/

     

     

    F5 have three official Twitter accounts of note, as follows: @f5networks, @devcentral and @F5Security.

     

     

    F5’s official LinkedIn company page can be found here: http://www.linkedin.com/company/f5-networks. There are also numerous unofficial F5 groups you can join.

     

     

    You’ll find the official F5 YouTube channel here: https://www.youtube.com/f5networksinc.

     

     

    F5 Also make use of SlideShare to share presentations, available here: http://www.slideshare.net/f5dotcom

     

  • Steve --

     

     

    Why do you say (above) that it is normally the case that virtual servers and pool members are in different subnets? We typically put them in the same subnet, and I'm researching this question mainly because we need to create a fairly large number of new virtual servers pointing to existing servers, but the subnet the servers are in is almost full. Routing is not an issue since the F5 does have a presence (Self IP) on both subnets. Is there some reason to make a point of putting them in different subnets?

     

     

    Thanks.