Forum Discussion

raj_385461's avatar
raj_385461
Icon for Nimbostratus rankNimbostratus
Apr 03, 2019

Route Domain to firewall

What should the routing domain should look like to achieve this.

 

Currently we have a default RD0 and RD1 has RD0 as the parent. I created RD2 with strict isolation.

 

1 Reply

  • Hello,

     

    Can you explain the context, we alredy try something and it's not working as expected? So let me know if you need more details

     

    So in your case you have 3 RD:

     

    • RD 0 parent
    • RD 1 attached to vlan "vlan-1.1.1"
    • RD 2 attached to vlan "vlan-2.2.2"

    You have to create 3 self IP

     

    • for RD0: Self-ip 3.3.3.10 (you can use this rd for dns, ntp, syslog, ...)
    • for RD1: Self-ip 1.1.1.10%1
    • for RD2: Self-ip 2.2.2.10%2

    Then you have to create 3 routes:

     

    • default route for RD0: route-default 0.0.0.0/0.0.0.0 GW 3.3.3.254
    • default route for RD1: route-default 0.0.0.0%1/0.0.0.0 GW 1.1.1.254%1 (your GW will be the FW-1)
    • default route for RD2: route-default 0.0.0.0%2/0.0.0.0 GW 2.2.2.254%2 (your GW will be the FW-2)

    For mor info check the following KB

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-routing-administration-11-6-0/8.html