Access by https and ssh

Sorry, Aaron, I have just read your message. I'm going to try and let you know

To Aaron:

 

 

[root@bigipcolt01:Standby] config tcpdump -nni 0.0 host 172.28.100.250 | grep 172.28.108.17

 

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

 

listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes

 

15:35:23.271777 IP 172.28.108.17 > 172.28.100.250: ICMP echo request, id 1, seq 2282, length 40

 

15:35:23.271798 IP 172.28.100.250 > 172.28.108.17: ICMP echo reply, id 1, seq 2282, length 40

 

15:35:24.272451 IP 172.28.108.17 > 172.28.100.250: ICMP echo request, id 1, seq 2283, length 40

 

15:35:24.272467 IP 172.28.100.250 > 172.28.108.17: ICMP echo reply, id 1, seq 2283, length 40

 

15:35:25.272378 IP 172.28.108.17 > 172.28.100.250: ICMP echo request, id 1, seq 2284, length 40

 

15:35:25.272398 IP 172.28.100.250 > 172.28.108.17: ICMP echo reply, id 1, seq 2284, length 40

 

15:35:26.272231 IP 172.28.108.17 > 172.28.100.250: ICMP echo request, id 1, seq 2285, length 40

 

15:35:26.272247 IP 172.28.100.250 > 172.28.108.17: ICMP echo reply, id 1, seq 2285, length 40

 

15:35:33.593358 IP 172.28.108.17.55467 > 172.28.100.250.443: S 2457874615:2457874615(0) win 8192

 

15:35:36.601083 IP 172.28.108.17.55467 > 172.28.100.250.443: S 2457874615:2457874615(0) win 8192

 

15:35:42.599618 IP 172.28.108.17.55467 > 172.28.100.250.443: S 2457874615:2457874615(0) win 8192

 

Apr 15 15:36:01 local/bigipcolt01 emerg system_check[5738]: 010d0006:0: Chassis power supply 102 is not supplying power (status: 0): make sure it is plugged in.

 

15:36:00.395239 IP 172.28.108.17.55468 > 172.28.100.250.22: S 1090008551:1090008551(0) win 8192

 

15:36:03.396809 IP 172.28.108.17.55468 > 172.28.100.250.22: S 1090008551:1090008551(0) win 8192

 

15:36:09.394335 IP 172.28.108.17.55468 > 172.28.100.250.22: S 1090008551:1090008551(0) win 8192

 

1222 packets captured

 

1222 packets received by filter

 

0 packets dropped by kernel

 

To Cspillane:

 

 

[root@bigipcolt01:Standby] config bigstart status httpd

 

httpd (pid 2978) is running...

 

[root@bigipcolt01:Standby] config bigstart status sshd

 

openssh-daemon (pid 2935) is running...

 

[root@bigipcolt01:Standby] config bigstart status tomcat

 

tomcat run (pid 3201) 6 minutes

 

 

 

Can you try connecting to the admin GUI from the command line using"

 

 

curl -k https://172.28.100.250

 

 

Aaron

Yes, it works from the LTM command line, and it seems it returns the html page.

 

 

For your information, when I try to do a telnet 172.28.100.250 443 from the LTM command line, I see that the port is open, but I don't get any response from my client navigator!

 

 

Do 'bigpipe httpd allow' and 'bigpipe sshd allow' show ALL hosts allowed?

 

 

Aaron

 

 

yes....

 

 

[root@bigipcolt01:Standby] config bigpipe httpd allow

 

HTTPD - HTTPD Allow:

 

All

 

[root@bigipcolt01:Standby] config bigpipe sshd allow

 

SSHD - SSH IP Allow List:

 

ALL

 

The LTM shouldn't respond to telnet, it'll only use secure (encrypted) methods like SSH or HTTPS.

Of course, but I'm telnetting port 443 and 22, not default 23

Apologies Marta, I misunderstood your previous statement.

 

 

I must say this appears to be an odd situation, I've never come across one quite like this before!