Forum Discussion

scott_h_ryan_82's avatar
scott_h_ryan_82
Icon for Nimbostratus rankNimbostratus
Mar 31, 2009

Regarding wildcare virtual servers

Here's what I'm trying to do...

 

 

Traffic on vlan 100 is dmz traffic. I want that traffic to go through the firewall before talking to servers on vlan 50 (internal). The server gateways are the self IP's. For internal load balancing, trunks were setup to allow the internal network, so the DMZ servers talk directly over those trunks to the internal network instead of traversing a firewall.

 

 

I create a wildcard virtual server network 0.0.0.0/0.0.0.0 all ports, all protocols, performancel4... i create a new pool and node, with the node pointing to the interface on the firewall.. say 200.1

 

 

Front end VIP addresses are on 192.168.200.x

 

DMZ servers are 192.168.100.x

 

Internal VIP addresse are on 192.168.25.x

 

Internal servers are on 192.168.50.x

 

 

So, my question is this.. if a server sends traffic/request to a server in the internal network with this config, will that traffic use the wildcare virtual gateway and force traffic to the firewall, or will it still use the trunk link that is carrying those internal vlans? Do I need to change the wildcare to ipforwarding instead of performancel4?

 

 

Need any input quickly so any help is appreciated. thanks.

1 Reply

  • Hi,

     

     

    This post should be moved to the Advanced Design & Config forum since it's not iControl...but...

     

     

    I think you are trying to do something similar to what I described in this post (Click here). You need to use the Perf L4 type, IPForwarding doesn't allow you to select a pool.

     

     

    Denny