缺省情况下,F5要求从F5发送出去的请求的响应必须在同一VLAN上被接收到,否则该连接将被RST掉,这是VLAN-key特性。如果一个连接请求和响应分别发生在不同VLAN上,那么必须关闭vlan-key功能。在system- general配置界面中有关于vlan-key的设置。
关闭vlan-key特性后,有以下副作用:
1. PVA功能将散失 SOL6417: PVA is not compatible with asymmetric connections across multiple VLANs
https://support.f5.com/kb/en-us/solutions/public/6000/400/sol6417.html
2.SOL8271: Asymmetric routing of client-side traffic may cause connections to stall
https://support.f5.com/kb/en-us/solutions/public/8000/200/sol8271.html
文章评论