Forum Discussion

Approxee's avatar
Approxee
Icon for Nimbostratus rankNimbostratus
May 04, 2014

Route Domains and AFM module

Hi Forum,   I want to be able to have 2 parent route domains to contain the public IPs and VLANs and to have 4 child domains two per parent domains.   Is it possible to position the AFM betwee...
design
kunjan_118660's avatar
kunjan_118660
Icon for Cumulonimbus rankCumulonimbus

You may need to create a parent route domain rd0 for rd1 and rd2 which can front the virtual servers on the public side and still maintain the strict isolation on the child domains.

 

Approxee's avatar
Approxee
Icon for Nimbostratus rankNimbostratus
May 06, 2014
Hi Kunjan, I read in the documentation that if the child rd's are configured for strict isolation, then the parents must also be the same. If I configure Strict Issolation on the childs then also on the rd1 and rd2, then do I have to also configure it rd0. The problem I have is a have two parent RD's each with two child RDs each. This is strict isolation, so that the childs can see each others routing tables. I was to position the AFM between the parent route domains, so access can be given based on the policy. If I switch off Strict Issolation, then the childs have visibility of each other and then I need to position the AFM policys between the childs and the parents.