Forum Discussion

JessicaL_195035's avatar
JessicaL_195035
Icon for Nimbostratus rankNimbostratus
Mar 31, 2015

Design BIG IP 5200V for VCMP

Hi, We have two BIG IP 5200V, we're about to put them in active standby state in our Network. We have in our network 4 sub-network, Internal, External01 directly on the Internet,External02 directly on the Internet and a DMZ.

 

We have to replace : Juniper DX that have External01 on one side traffic and make load balancing on the Internal. Reverse proxy : That have External traffic on one side and make reverse proxy to Internal server.

 

My questions : How do you guys separate the VCMP, since we can not pass VCMP to one and another ?

 

Is it recommand to put on a VCMP internal and External VLAN ? Is it secure ?

 

Thanks

 

Jessica

 

design

1 Reply

Sort By
  • amolari's avatar
    amolari
    Icon for Cirrus rankCirrus
    Mar 31, 2015

    vCMP guests are isolated from eachother and get access to VLANs that are provided to them by the Host. Why do you want to split your LB and reverse-proxy functions in 2 vCMP guests? Any security (isolation) reason? If not you're going to add extra operational overhead (vcmp are managed as an appliance for themself).