BigIP Remove the source address of host

would u mind posting your config here?

 

 

b self list

 

b route list

 

b virtual (virtual_server_name) list

 

b pool (pool_name) list

b self list

 

 

self 172.16.1.22 {

 

netmask 255.255.255.0

 

vlan VLAN_2

 

allow default

 

}

 

 

b route list

 

route 172.16.0.0/16 {

 

gateway 172.16.1.222

 

}

 

 

b virtual VS-Test list

 

virtual VS-Test {

 

translate service disable

 

snat automap

 

pool Pool- Test

 

destination 172.16.1.26:http

 

ip protocol tcp

 

profiles {

 

IntraSourceAdd {}

 

tcp {}

 

}

 

}

 

pool Pool- Test {

 

monitor all http

 

members {

 

172.16.1.20:http {}

 

172.16.1.30:http {}

 

}

 

}

 

what's client ip? isn't it in 172.16.0.0/24 subnet?

 

 

if yes, have u seen response packet from pool?

 

tcpdump -nni 0.0 port 80 and host client_ip and \(host 172.16.1.20 or host 172.16.1.30\)

 

*client_ip is client ip address

 

the virtual IP address : 172.16.1.26

 

two physical address 172.16.1.20 and 172.16.1.30

 

BigIp self ip 172.16.1.22

 

Cisco Core Switch 172.16.1.222

 

 

the two servers have the gateway of coreswitch 172.16.1.222

 

 

when i change it to Bigip address 172.16.1.22 both the servers stops

the client is on diiferenet subnet 172.16.2.0 /24

have u seen response packet from pool?

 

 

tcpdump -nni 0.0 port 80 and host client_ip and \(host 172.16.1.20 or host 172.16.1.30\)

 

*client_ip is client ip address

 

 

btw, do we need to disable icmp redirect on catalyst?

 

i did the command and i can c nothing as output

 

 

i change the sorce address to be the self ip 172.16.1.22 and i got the traffic

 

i did the command and i can c nothing as output

 

 

i change the sorce address to be the self ip 172.16.1.22 and i got the traffic

 

13:31:03.891043 IP 172.16.1.22.40083 > 172.16.1.20.80: . ack 1 win 46

 

13:31:03.891103 IP 172.16.1.22.40083 > 172.16.1.20.80: P 1:8(7) ack 1 win 46

 

13:31:03.894727 IP 172.16.1.20.80 > 172.16.1.22.40083: P 1:250(249) ack 8 win 260

 

13:31:03.895013 IP 172.16.1.22.40083 > 172.16.1.20.80: . ack 250 win 54

 

13:31:03.895072 IP 172.16.1.22.40083 > 172.16.1.20.80: F 8:8(0) ack 250 win 54

 

13:31:03.895076 IP 172.16.1.20.80 > 172.16.1.22.40083: F 250:250(0) ack 8 win 260

 

13:31:03.895957 IP 172.16.1.20.80 > 172.16.1.22.40083: . ack 9 win 260

 

13:31:03.896022 IP 172.16.1.22.40083 > 172.16.1.20.80: . ack 251 win 54

 

client is 192.168.206.96

 

vip is 172.28.17.66

 

selfip is 172.28.17.60

 

pool member is 172.28.17.80

 

pool member's default gateway is 172.28.17.60

 

 

[root@tulip:Active] config b self 172.28.17.60 list

 

self 172.28.17.60 {

 

netmask 255.255.255.0

 

vlan external

 

allow all

 

}

 

[root@tulip:Active] config b virtual bar list

 

virtual bar {

 

pool foo

 

destination 172.28.17.66:ssh

 

ip protocol tcp

 

}

 

[root@tulip:Active] config b pool foo list

 

pool foo {

 

members 172.28.17.80:ssh {}

 

}

 

 

[root@tulip:Active] config tcpdump -nni 0.0 \(host 192.168.206.96 and host 172.28.17.66 and port 22\) or \(host 192.168.206.96 and host 172.28.17.80 and port 22\)

 

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

 

listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes

 

(1) 03:33:22.083798 IP 192.168.206.96.63959 > 172.28.17.66.22: S 376152562:376152562(0) win 8192

 

(2) 03:33:22.083847 IP 172.28.17.66.22 > 192.168.206.96.63959: S 3250302098:3250302098(0) ack 376152563 win 4380

 

(3) 03:33:22.084122 IP 192.168.206.96.63959 > 172.28.17.66.22: . ack 1 win 256

 

(4) 03:33:22.084168 IP 192.168.206.96.63959 > 172.28.17.80.22: S 4066958068:4066958068(0) win 4380

 

(5) 03:33:22.085213 IP 172.28.17.80.22 > 192.168.206.96.63959: S 1806241468:1806241468(0) ack 4066958069 win 5840

 

(6) 03:33:22.085225 IP 192.168.206.96.63959 > 172.28.17.80.22: . ack 1 win 4380

 

 

packet no1-3 is syn, syn+ack and ack between client and vip

 

packet no4-6 is syn, syn+ack and ack between bigip and pool member (since snat is none, source ip isn't changed to bigip selfip). i don't show mac address. if u do, u will see even source ip is client ip but mac address is bigip mac address indeed.

 

 

hth