Forum Discussion
Alfy
Mar 30, 2012Nimbostratus
Block ICMP (Ping) on a specific VS
Hello All,
I'm wondering if it's possible to block ping response on a specific VS by an iRule or by another configuration way.
Thanks for your help.
AB
hooleylist
Mar 30, 2012Cirrostratus
Hi Alfy,
You could use a packet filter that drops ICMP for specific virtual addresses. I think you could use a packet filter rule like:
( proto ICMP ) and ( dst host 10.1.1.1)
where 10.1.1.1 is your virtual server address. The action would be drop.
You can check the config guide for your version for details. Here's the manual section for 11.1:
TMOS concepts - 11.1
https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-concepts-11-1-0/tmos_packet_filters.html
TMOS Implementations - 11.1
https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-1-0/14.html
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects