For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Santhosh0991's avatar
Santhosh0991
Icon for Nimbostratus rankNimbostratus
Jun 14, 2021

After failover from A to B,the traffic is not flowing to B

Even after the failover from A to B is fine, the traffic doesn't flow through B, I have checked for both traffic groups where masquerade is enabled and other is not, same behaviour
application delivery
LTM
AlexBCT's avatar
AlexBCT
Icon for Cumulonimbus rankCumulonimbus
Jun 15, 2021

Hi,

 

It could be caused by a number of different things, here are a couple of tips that can hopefully help you isolate the problem;

 

  • In the B box, do you have any entries in the TMOS arp table? (i.e. can the box see its neighbours? - "tmsh show net arp")
  • Can you reach box A over different interfaces? (e.g. internal / external / ha) this again to confirm that box B does have network access.
  • Can you reach the gateway from box B and can the gateway reach you?
  • Have the same routes been configured in box A as in box B? (in CLI; "route -n" and "tmsh show net route")
  • Have any of the self IP's been accidentally configured on "traffic-group-local-only", rather than the floating traffic group?
  • Are any of the virtual servers using the IP address of any non-floating IP's?
  • If traffic is coming in, but not going back out, check the routing on your backend servers and/or SNAT configuration.

 

These are just some ideas from the top of my head. Hope there is something useful in here.. ;)