CirrusHi, I'm currently trying to set up authentication on my F5 to use "Remote - Active Directory". When I log in to the F5 with my active directory account, which IP address is it going to use to talk to the domain controllers? Its management IP or a Self-IP?
Thanks
The basic answer is "it depends". What I mean by this is that the F5 will use whatever IP is appropriate, based upon its routing table. If you have a default route that uses a self-IP to contact the gateway, it should use that. If you don't have a default route which would use your self-IP, then it should use the default route assigned to the management interface.
You could check to see what the system thinks by running the following in the bash shell:
ip route get
From there it will tell you which gateway the connection would use.
Some more documentation on how the BIG-IP handles management routing (if you prefer the AD traffic use the management interface) is here: https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13284.html