Forum Discussion

Chris_23021's avatar
Chris_23021
Icon for Nimbostratus rankNimbostratus
Jun 03, 2009

Accept Any Port 9.4

So I am trying to setup a Virtual Server VIP to do a few things though the behavior I am seeing now is strange.

 

 

So I setup the Virtual Servers below. One is configured to terminate the SSL cert on the F5 and is working fine, the second I am accepting Ports "*" Any.

 

 

OEM Common 10.1.1.10443 (HTTPS) Standard

 

OEM_NO-SSL Common 10.1.1.100 (Any)

 

 

Virtual Server configured as

 

 

Address Translation Enabled

 

Port Translation Enabled

 

SNAT Pool SNAT_Pool

 

SNAT comes out as 10.1.8.200

 

 

I have the pool setup with ONE host. I have tried having port any 0: here as well.

 

 

10.1.8.150:80

 

 

 

Host is up all services are available and the firewall is allowing the traffic on the outside and inside.

 

 

Problem is I need ports 22 and 10000-19999 and when I try connecting to port 22 the F5 responds not the host.

 

 

config
design
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 15, 2009
    You'll need to configure the pool member for port 0 and port translation on the any port virtual server. If that doesn't work, what happens when you try to access the virtual server on a port other than 443? What protocol are you testing? Do you see the request proxied from LTM to the pool member?

     

     

    A tcpdump might help:

     

     

    tcpdump -nni 0.0 host 10.1.1.10 or host 10.1.8.150

     

     

    Aaron