Forum Discussion

leo_graells_234's avatar
leo_graells_234
Icon for Nimbostratus rankNimbostratus
May 24, 2017

Routing between partitions / route domains

Hello, we currently have a f5 cluster configured with two partitions, two vlans and two route domains respectively default route domains for partitions :

 

Public partition with Public Vlan with Y route domain. Private partition with Private Vlan with Z route domain.

 

We would like to know if it's possible to route trafic from publicVS (1.1.1.10) to privateVS (2.2.2.10) to server (3.3.3.10), bypassing our firewalls. So without using the defaut gateway (firewalls) :

 

 

Thanks for your help

 

application delivery
LTM
security

6 Replies

Sort By
  • oscarnet_69487's avatar
    oscarnet_69487
    Icon for Nimbostratus rankNimbostratus
    May 24, 2017

    HI

     

    LTM and firewall is transparent mode or route mode ?

     

    thinks

     

    have a good day?

     

  • leo_graells's avatar
    leo_graells
    Icon for Nimbostratus rankNimbostratus
    May 24, 2017

    Hello, thanks for your help. FW in transparent mode & LTM in route mode

     

  • oscarnet_69487's avatar
    oscarnet_69487
    Icon for Nimbostratus rankNimbostratus
    May 24, 2017

    Hi leo

     

    1. Do you want to bypass firewall right?
    2. server fram in routedomain A or B ?

    have a good day!

     

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    May 24, 2017

    Hi, I think you only can do that flow, when you disable "Strict Isolation" on both RD, plus iRule in VS 1.1.1.10 to forward traffic from PartitionA, to another PartitionB virtual server, e.g.

    when CLIENT_ACCEPTED {
   virtual /PartitionB/vs_2_2_2_10
}

    https://support.f5.com/csp/article/K84417414

    https://devcentral.f5.com/wiki/irules.virtual.ashx

    Maybe is not a good idea bypass a firewall and disable isolation. I think the "Strict Isolation" and firewall should be precious to your network.

    Best regards.

  • leo_graells's avatar
    leo_graells
    Icon for Nimbostratus rankNimbostratus
    May 30, 2017

    Hello, yeah I want to bypass FW. Server farm is in other network (not on any routedomain). The VS on the RD 2 point on the server.

     

    Thanks

     

  • damjanev's avatar
    damjanev
    Icon for Nimbostratus rankNimbostratus
    Oct 08, 2018

    If one uses "virtual /PartitionB/vs_2_2_2_10" to forward the client connection to the inside VS, how do we ensure that the response takes the exact reverse path from RD2 to RD1 without going between FWs? Firewalls are notorious for not liking out of state connections.